BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time.
Repository Index
71,372 visible repositories in the index
25–48 of 61 · Most stars
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc.
- powershell
- deployment
- active
- directory
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte
- incident-response
- malware-detection
- persistence
- powershell
Copy, export, import, delete, document and compare policies and profiles in Intune and Azure with PowerShell script and WPF UI. Import ADMX files and registry settings with ADMX ingestion. View and edit PowerShell script.
- intune
- msal
- powershell-script
- microsoft
🛠 A command-line system information utility written in PowerShell. Like Neofetch, but for Windows.
A build automation tool written in PowerShell
- powershell
- psake
- build
- powershell-module
Work with Windows containers and LCOW on Mac/Linux/Windows
- vagrant
- docker-machine
- windows-containers
- windowscontainers
Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.
Build Automation in PowerShell
- powershell
- build
- automation
CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.
:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.
$MFT directory tree reconstruction & FILE record info
- mft-browser
- mft
- powershell
- winform
🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.
TranslatedGPT娘 (GPT Niang, "GPT girl") quota widget: a white-haired dragon girl desktop widget for Windows / macOS that automatically recognizes plans such as Free, Go, Plus, and Pro, displays the actual quota windows, and supports single-line centered display, quotes, press feedback, drag-and-resize, and following the main window.
Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant
Build docker images for Sitecore
:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365
Converts SharePoint Data sources for the MS Flow and PowerApps to a new tenant of your choice.
- powerapps
- sharepoint
- flow
- powerapps-packages
MongoDB Cmdlets for PowerShell
This repo contains all currently available Azure Resource Manager templates for Sitecore
- sitecore
- arm-templates
TranslatedKill switch for applications: freezes Claude, ChatGPT, Cursor, Telegram and other programs when the VPN drops, or when the network or IP changes
- golang
- ipv6
- kill-switch
- linux
WELA (Windows Event Log Analyzer, ゑ羅) is a tool for auditing and configuring Windows event log settings. Windows event logs are a vital source of information for Digital Forensics and Incident Response (DFIR), providing visibility into system activity and security events.
TranslatedLet AI understand the video in which you @ it on Bilibili, and automatically reply with a comment containing clickable timestamps. A DSH / AI Agent skill.
- ai-agents
- automation
- bilibili
- comment-bot