Repository Index

Install Linux next to Windows without a USB stick

Work with Windows containers and LCOW on Mac/Linux/Windows

• vagrant
• docker-machine
• windows-containers
• windowscontainers

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers

• powershell
• rest
• powershell-core
• windows

Build Automation in PowerShell

• powershell
• build
• automation

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

Powershell-based bot framework

• bot
• powershell
• bot-framework
• bots

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

Zero Infrastructure Password Cracking

• cloudtopolis
• cracking
• hashes
• cloud

Unlimited Google Photos auto-sync on Windows with Pixel original quality spoofing,native, portable, and zero-quota.

• google-photos
• unlimited-storage

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

No description provided by the repository host.

PowerShell module for simple Slack integration

• slack
• powershell
• powershell-modules
• slack-sender

GPT娘额度挂件：Windows / macOS 白发龙娘桌面挂件，自动识别 Free、Go、Plus、Pro 等套餐，按实际额度窗口显示，支持单行居中、语录、按压反馈、拖动缩放和主窗口跟随。

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

Build docker images for Sitecore

• sitecore
• docker

:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

Converts SharePoint Data sources for the MS Flow and PowerApps to a new tenant of your choice.

• powerapps
• sharepoint
• flow
• powerapps-packages

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse

MongoDB Cmdlets for PowerShell

• mongodb
• powershell

This repo contains all currently available Azure Resource Manager templates for Sitecore

• sitecore
• arm-templates

WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.