Repository Index

Automation for internal Windows Penetrationtest / AD-Security

• pentesting
• automation
• adsecurity
• privilege-escalation

Automate the setup and configuration of your Windows development environment.

MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain.

A collection of more than 170+ tools, scripts, cheatsheets and other loots that I've developed over years for Red Teaming/Pentesting/IT Security audits purposes.

• penetration-testing
• penetration
• testing
• tools

The Official Bash Bunny Payload Repository

• badusb
• bashbunny
• duckyscript
• hak5

🚀 SQL Server automation and instance migrations have never been safer, faster or freer

• powershell
• sql-server
• database-administration
• best-practices

Automation to assess the state of your M365 tenant against CISA's baselines

• assessment-tool
• cisa
• cybersecurity
• m365

A cheat sheet that contains common enumeration and attack methods for Windows Active Directory.

• active-directory
• active-directory-cheatsheet
• active-directory-exploitation
• penetration-testing

HardeningKitty and Windows Hardening Settings

• windows
• hardening
• security
• windows-10

This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected.

• azureactivedirectory
• itdr
• microsoftentraid
• microsoftsentinel

The official PowerShell documentation sources

• powershell
• powershell-documentation
• hacktoberfest

Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode

Manages, configures, extracts and monitors Microsoft 365 tenant configurations

• microsoft365
• powershell
• monitoring
• desiredstateconfiguration

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

• active-directory
• powershell
• redteaming
• penetration-testing

BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.

Remote Desktop entirely coded in PowerShell.

• remote-control
• powershell
• windows
• rdp

AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.

• powershell
• deployment
• active
• directory

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

• poshc2
• c2
• redteam
• nettitude

Copy, export, import, delete, document and compare policies and profiles in Intune and Azure with PowerShell script and WPF UI. Import ADMX files and registry settings with ADMX ingestion. View and edit PowerShell script.

• intune
• msal
• powershell-script
• microsoft

A lightweight, stable, and performance-focused customized version of Windows that enhances privacy and compatibility

• gaming
• performance
• privacy
• revios

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS!