Tools

checkymander/sharp-smbexec

C# implementation of SMBExec for remote command execution on Windows targets using NTLM password hashes, enabling lateral movement and pass-the-hash…

tntrock/cve-2024-4577_powershell

使用PowsrShell掃描CVE-2024-4577

joelgmsec/invoke-stealth

Simple & Powerful PowerShell Script Obfuscator

joelgmsec/invoke-transfer

PowerShell tool for transferring files in restricted environments (Citrix, RDP, VNC, Guacamole) via clipboard, Base64 chunks, keystrokes, or OCR…

peewpw/invoke-psimage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

danielbohannon/invoke-cradlecrafter

PowerShell Remote Download Cradle Generator & Obfuscator

tokyoneon/credphish

PowerShell script that invokes legitimate credential prompts and exfiltrates captured passwords over DNS using CredentialPicker and Resolve-DnsName.

blacksnufkin/invoke-dumpmdeconfig

PowerShell script to dump Microsoft Defender Config, protection history and Exploit Guard Protection History (no admin privileges required )

empireproject/empire

Empire is a PowerShell and Python post-exploitation agent.

danielbohannon/invoke-dosfuscation

Cmd.exe Command Obfuscation Generator & Detection Test Harness

robomotic/invoke-antivm

powershell tool for VM evasion

000tonio/cve-2021-1675

PowerShell exploit for CVE-2021-1675 PrintNightmare that disables AMSI and creates a local administrator account on vulnerable Windows systems.

0sm0s1z/invoke-selfsignedwebrequest

This repo exists as a quick and dirty arsenal of methods and scripts to subvert .NET SSL/TLS certificate validation in PowerShell and press on with…

wietze/invoke-argfuscator

Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native…

b5null/invoke-badsuccessor.ps1

PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)

peewpw/invoke-wcmdump

PowerShell Script to Dump Windows Credentials from the Credential Manager

0xqn/clsidfinder

PowerShell enumeration script for discovering service-backed COM objects via CLSID/AppID correlation and activation testing.