Repository Index

A collection of scripts for assessing Microsoft Azure security

The repository host gives no description.

netshell features all in version 2 powershell

Create a vulnerable active directory that's allowing you to test most of the active directory attacks in a local lab

• active-directory
• powershell
• redteaming
• penetration-testing

PowerTools is a collection of PowerShell projects with a focus on offensive operations.

Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte

• incident-response
• malware-detection
• persistence
• powershell

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

• poshc2
• c2
• redteam
• nettitude

A Powershell incident response framework

Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts watermarking, IOCs collection & PE Backdooring. You feed it with your implant, it does a lot of sneaky things and spits out obfuscated executable.

Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)

• powershell
• golang
• python
• clueless-agents

CimSweep is a suite of CIM/WMI-based tools that enable the ability to perform incident response and hunting operations remotely across all versions of Windows.

:rocket: PSRecon gathers data from a remote Windows host using PowerShell (v2 or later), organizes the data into folders, hashes all extracted data, hashes PowerShell and various system properties, and sends the data off to the security team. The data can be pushed to a share, sent over email, or retained locally.

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

• threat
• hunt
• red
• blue

Robust ABC (ActionScript Bytecode) [Dis-]Assembler

Zero Infrastructure Password Cracking

• cloudtopolis
• cracking
• hashes
• cloud

Easily encrypt data in Django

• python
• django

$MFT directory tree reconstruction & FILE record info

• mft-browser
• mft
• powershell
• winform

🚀AutoRuns is a PowerShell module that will help do live incident response and enumerate autoruns artifacts that may be used by legitimate programs as well as malware to achieve persistence.

Automated Tactics Techniques & Procedures

• empire
• tactics
• procedure
• cybersecurity

Automatic deployment of Cuckoo Sandbox malware lab using Packer and Vagrant

:mailbox: The Phishing Intelligence Engine - An Active Defense PowerShell Framework for Phishing Defense with Office 365

Invoke-LiveResponse

• ir
• dfir
• winrm
• liveresponse

Intrusion Prevention System (IPS) for Secure Shell (SSH)

Collection of hashcat lists and things.

• hashcat
• hashcat-rules
• hashcat-masks
• password-cracking