
PowerShell-Red-Team
Collection of PowerShell functions a Red Teamer may use in an engagement

Collection of PowerShell functions a Red Teamer may use in an engagement

PowerShell toolkit for Active Directory penetration testing, featuring domain/user/group enumeration, trust relationship analysis, RDP configuration,…

A Powershell implementation of PrivExchange designed to run under the current user's context

Hook PasswordChangeNotify

C# implementation of SMBExec for remote command execution on Windows targets using NTLM password hashes, enabling lateral movement and pass-the-hash…

A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell…

Powerglot encodes offensive powershell scripts using polyglots . Offensive security tool useful for stego-malware, privilege escalation, lateral…

CVE-2021-1675 / CVE-2021-34527 - PrintNightmare Python, C# and PowerShell Exploits Implementations (LPE & RCE)

Python and Powershell internal penetration testing framework

PowerShell Pass The Hash Utils

Powershell script to do domain auditing automation

This is a PowerShell based tool that is designed to act like a RAT. Its interface is that of a shell where any command that is supported is…

Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to determine…

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

OpSec-safe Powershell runspace from within C# (aka SharpPick) with AMSI, Constrained Language Mode and Script Block Logging disabled at startup

Salsa Tools - ShellReverse TCP/UDP/ICMP/DNS/SSL/BINDTCP/Shellcode/SILENTTRINITY and AV bypass, AMSI patched

SessionGopher is a PowerShell tool that uses WMI to extract saved session information for remote access tools such as WinSCP, PuTTY, SuperPuTTY,…

A swiss army knife for pentesting networks