Tools

i-am-jakoby/powershell-for-hackers

This repository is a collection of powershell functions every hacker should know

tobor88/powershell-red-team

Collection of PowerShell functions a Red Teamer may use in an engagement

alperenugurlu/ad_enumeration_hunt

PowerShell toolkit for Active Directory penetration testing, featuring domain/user/group enumeration, trust relationship analysis, RDP configuration,…

omerya/invisi-shell

Hide your Powershell script in plain sight. Bypass all Powershell security features

cyberark/riskyspn

Detect and abuse risky SPNs

kevin-robertson/tater

Tater is a PowerShell implementation of the Hot Potato Windows Privilege Escalation exploit from @breenmachine and @foxglovesec

powershellempire/powertools

Collection of offensive PowerShell projects for reconnaissance, privilege escalation, and post-exploitation during penetration testing engagements.

calebstewart/cve-2021-1675

Pure PowerShell implementation of CVE-2021-1675 Print Spooler Local Privilege Escalation (PrintNightmare)

g0ldengunsec/powerpriv

A Powershell implementation of PrivExchange designed to run under the current user's context

tralsesec/cve-2024-0670

CheckMK Agent Local Privilege Escalation (PoC)

aocorsaire/cve-2017-16245

Source code for CVE-2017-16245 (Avecto Defendpoint bypass originally disclosed by Nettitude)

mr-un1k0d3r/atp-powershell-scripts

Microsoft Signed PowerShell scripts

flangvik/sharpapplocker

C# port of the Get-AppLockerPolicy PS cmdlet

zedocun/soc-investigation-powershell-edrfreeze

SOC investigation of CVE-2024-49138 exploitation alert involving PowerShell, EDRFreeze execution, and defense evasion behavior in a simulated…

viralmaniar/phirautee

A proof of concept crypto virus to spread user awareness about attacks and implications of ransomwares. Phirautee is written purely using PowerShell…