Tools

b5null/invoke-badsuccessor.ps1

PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)

peewpw/invoke-psimage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

kitsune-de/stealth_call

Header-only Windows x64 indirect syscall library. Zero CRT, zero IAT, VEH anti-BP, AMSI/ETW bypass, W^X memory, per-call dynamic stubs.

pwndexter/sharpedrchecker

C# tool that enumerates running processes, loaded DLLs, installed services, and drivers to detect the presence of AV, EDR, and logging products,…

joelgmsec/invoke-stealth

Simple & Powerful PowerShell Script Obfuscator

peewpw/invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

ivan-sincek/invoker

Penetration testing utility and antivirus assessment tool.

kudaes/dinvoke_rs

Dynamically invoke arbitrary unmanaged code

empireproject/empire

Empire is a PowerShell and Python post-exploitation agent.

danielbohannon/invoke-obfuscation

PowerShell Obfuscator

tokyoneon/credphish

PowerShell script that invokes legitimate credential prompts and exfiltrates captured passwords over DNS using CredentialPicker and Resolve-DnsName.

0xqn/clsidfinder

PowerShell enumeration script for discovering service-backed COM objects via CLSID/AppID correlation and activation testing.

danielbohannon/invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

n00py/outpacket

This cheatsheet maps common impacket workflows to their modern alternatives

joelgmsec/invoke-transfer

PowerShell tool for transferring files in restricted environments (Citrix, RDP, VNC, Guacamole) via clipboard, Base64 chunks, keystrokes, or OCR…

jakehildreth/locksmith

A small tool built to find and fix common misconfigurations in Active Directory Certificate Services.

danielbohannon/invoke-dosfuscation

Cmd.exe Command Obfuscation Generator & Detection Test Harness