PowerShell-for-Hackers
i-am-jakoby/powershell-for-hackersThis repository is a collection of powershell functions every hacker should know
command-and-controlcurated-resourcesdata-exfiltration+9
i-am-jakoby/powershell-for-hackersThis repository is a collection of powershell functions every hacker should know
tobor88/powershell-red-teamCollection of PowerShell functions a Red Teamer may use in an engagement
tonyphipps/meerkatA collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.
alperenugurlu/ad_enumeration_huntPowerShell toolkit for Active Directory penetration testing, featuring domain/user/group enumeration, trust relationship analysis, RDP configuration,…
darkoperator/veil-powerviewPowerShell toolkit for Active Directory reconnaissance and network situational awareness, enabling domain enumeration, privilege escalation path…
daniel0x00/invoke-cve-2022-22965-safecheckPowerShell port of CVE-2022-22965 vulnerability check by colincowie.
emrekybs/douglas-042Triages a suspect Windows machine in minutes. Collects processes, services, autoruns, event logs and forensic artifacts, flags attacker activity, and…
mr-un1k0d3r/atp-powershell-scriptsMicrosoft Signed PowerShell scripts
invictus-ir/microsoft-extractor-suiteA PowerShell module for acquisition of data from Microsoft 365 and Azure for Incident Response and Cyber Security purposes.
renanhsilva/checkvulncve20205902A powershell script to check vulnerability CVE-2020-5902 of ip list
azuread/azure-ad-incident-response-powershell-moduleThe Azure Active Directory Incident Response PowerShell module provides a number of tools, developed by the Azure Active Directory Product Group in…
raikia/get-reconinfoA powershell script that prints a lot of IP and connection info to the screen
gerenios/aadinternalsPowerShell module for administering and auditing Azure AD and Office 365, enabling token manipulation, user enumeration, and security assessments of…
csandker/azure-accesspermissions
compasssecurity/entrafalconA lightweight PowerShell tool for assessing the security posture of Microsoft Entra ID environments. It helps identify privileged objects, risky…
mhaskar/octopusOpen source pre-operation C2 server based on python and powershell
m8sec/pymetaUtility to download and extract document metadata from an organization. This technique can be used to identify: domains, usernames, software/version…