
Powershell-C2
Powershell-C2

Powershell-C2



Powershell Persistence Locator

Scanner for the Mini Shai-Hulud npm/PyPI supply chain worm (NHS CC-4781 · CVE-2026-45321). Detects gh-token-monitor persistence, payload artefacts,…

Malicious WMI Events using PowerShell

A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell…

PowerShell tool for red teamers that clears execution evidence by stopping event logging, removing file and registry artifacts, and saving timestamps…


PowerShell script that aim to help uncovering (eventual) persistence mechanisms deployed by a threat actor following an Active Directory domain…

PowerShell script helping Incident Responders discover potential adversary persistence mechanisms.

A framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks