Stars
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
A post-exploitation powershell tool for extracting juicy info from memory.
PowerTools is a collection of PowerShell projects with a focus on offensive operations.
Python script for analyis of the "Trust.csv" file generated by Veil PowerView. Provides graph based analysis and output.
PowerShell implementations of path-finding algorithms using graph theory
Unicorn is a simple tool for using a PowerShell downgrade attack and inject shellcode straight into memory. Based on Matthew Graeber's powershell attacks and the powershell bypass technique present…
C++ application that uses memory and code hooks to detect packers
SprayWMI is an easy way to get mass shells on systems that support WMI. Much more effective than PSEXEC as it does not leave remnants on a system.
Analysis Suite For EAP Enabled Wireless Networks
PowerForensics provides an all in one platform for live disk forensic analysis
(Unofficial) Python API for https://dnsdumpster.com/
This Powershell script will generate a malicious Microsoft Office document with a specified payload and persistence method.
6zq / PowerShell
Forked from NetSPI/PowerShellNetSPI PowerShell Scripts
A powershell script for cracking halfLMchall password hashes
PowerSploit - A PowerShell Post-Exploitation Framework
.NET IPv4/IPv6 machine-in-the-middle tool for penetration testers
PowerShell Module with Security cmdlets for security work
Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C
python script setting up a transparent proxy to forward all TCP and DNS traffic through a SOCKS / SOCKS5 or HTTP(CONNECT) proxy using iptables -j REDIRECT target
Powershell MS Outlook enumeration and phishing tool
Detection of malware using dynamic behavior and Windows audit logs