PowerShell

Automation for internal Windows Penetrationtest / AD-Security

Tmux on Windows Powershell - tmux for PowerShell, Windows Terminal, cmd.exe. Includes psmux, pmux, and tmux commands. This is native High-Performance Tmux designed for Windows in Rust 🦀

Pester is the ubiquitous test and mock framework for PowerShell.

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

600+ free PowerShell scripts (.ps1) for Linux, macOS, and Windows.

A repository of sysmon configuration modules

if you are Thanos(root), this command could delete half your files randomly

The Official Bash Bunny Payload Repository

A PowerShell module to show file and folder icons in the terminal

A PowerShell script to download Windows or UEFI Shell ISOs

PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, ...)

🚀 SQL Server automation and instance migrations have never been safer, faster or freer

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server

PowerShell module to import/export Excel spreadsheets, without Excel

HardeningKitty and Windows Hardening Settings

Automation to assess the state of your M365 tenant against CISA's baselines

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

The official PowerShell documentation sources

A collection of scripts for assessing Microsoft Azure security

netshell features all in version 2 powershell

Manages, configures, extracts and monitors Microsoft 365 tenant configurations

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

Remote Desktop entirely coded in PowerShell.

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

List Formatting Samples for use in SharePoint and Microsoft Lists

📦 The Extras bucket for Scoop.

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!