Repository Index

The goal of this repository is to document the most common techniques to bypass AppLocker.

• applocker
• bypass
• awl
• rules

This repository contains a collection of Agent Skills developed by GudaStudio, enabling seamless collaboration between Claude and other AI models and tools.

Place to store our documentation, code samples, etc for public consumption.

HardeningKitty - Checks and hardens your Windows configuration

• windows
• windows-10
• windows-server
• hardening

A post-exploitation powershell tool for extracting juicy info from memory.

PowerShell examples for articles published on https://office365itpros.com and https://practical365.com. See https://o365itpros.gumroad.com/l/M365PS for the Automating Microsoft 365 with PowerShell eBook (included in the MIcrosoft 365 for IT Pros bundle https://gum.co/O365IT/)

• microsoft365
• microsoftgraph
• powershell
• graphsdk

Complete installer for Automatic1111's infamous Stable Diffusion WebUI

Azure Security Resources and Notes

A Powershell incident response framework

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

• bypass-antivirus
• antivirus-evasion
• antivirus
• attack

This repository is a collection of powershell functions every hacker should know

• badusb
• badusb-payloads
• flipperzero
• hak5

Microsoft Integration, Azure, Power Platform, Office 365 and much more Stencils Pack it’s a Visio package that contains fully resizable Visio shapes (symbols/icons) that will help you to visually represent On-premise, Cloud or Hybrid Integration and Enterprise architectures scenarios (BizTalk Server, API Management, Logic Apps, Service Bus, Event Hub…), solutions diagrams and features or systems that use Microsoft Azure and related cloud and on-premises technologies in Visio 2016/2013

• stencils
• stencils-pack
• mis-azure
• support-stencils

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers

• powershell
• rest
• powershell-core
• windows

TranslatedMultiple windows for Claude Desktop with different APIs at the same time: keep your official Claude subscription in one window and run other windows on custom / third-party APIs (cc-switch). Windows. Run multiple instances of Claude Desktop, with multiple windows using different APIs at the same time (official subscription and third-party APIs working simultaneously).

• anthropic
• cc-switch
• claude
• claude-code

Powershell-based bot framework

• bot
• powershell
• bot-framework
• bots

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

PowerShell module for simple Slack integration

• slack
• powershell
• powershell-modules
• slack-sender

:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

Portable, ready-to-play Windows build of the Eden FE: Fortune’s Weave emulator fork (based on xDarkWindx 1.12 and Duck912's forks). Runs on any x64 CPU, settings pre-tuned for Fortune’s Weave, plus a start-up crash fix. Bring your own keys, firmware and game.

TranslatedKill switch for applications: freezes Claude, ChatGPT, Cursor, Telegram and other programs when the VPN drops, or when the network or IP changes

• golang
• ipv6
• kill-switch
• linux

WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.