

Proof-of-concept exploits for CVE-2022-31199, a critical .NET deserialization RCE in Netwrix Auditor. Includes Python and PowerShell scripts, payload…

SOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated…

A personal Windows SOC suite built in PowerShell — monitors network connections, resource usage, scheduled tasks and power events with severity…

High fidelity defensive security lab simulating a DoD aligned enterprise network with Active Directory, VLAN segmentation, STIG based hardening,…

Automated remediation of CVE-2025-53783 (Teams RCE) using PowerShell

Windows Local Privilege Escalation Cookbook

Custom PowerShell module to setup an Active Directory lab environment to practice penetration testing.

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

PowerShell-based provisioning framework for deploying complex lab environments on Hyper-V and Azure. Supports Windows, Linux, and products like AD,…

MasterParser is a powerful DFIR tool designed for analyzing and parsing Linux logs

Enterprise vulnerability management on Azure — Terraform-deployed Nessus scanner, credentialed scanning, CVE-2013-3900 remediation with verified…

Building an Active Directory domain and hacking it

Using Struts2 and PowerShell to recreate CVE-2017-5638 OGNL Injection vulnerability.

Automate the creation of a lab environment complete with security tooling and logging best practices

Hands-on red-team obfuscation workshop teaching AMSI bypass, ETW evasion, and payload obfuscation with PowerShell, Visual Basic, and C# to evade…

Course repository for PowerShell for Pentesters Course

An exercise to practice deobfuscating PowerShell Scripts.

A powershell poc to load and automatically run Certify and Rubeus from memory.