PowerSploit - A PowerShell Post-Exploitation Framework

Six Degrees of Domain Admin

Empire is a PowerShell and Python post-exploitation agent.

Red Teaming Tactics and Techniques

PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities.

A post-exploitation powershell tool for extracting juicy info from memory.

DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAR…

JAWS - Just Another Windows (Enum) Script

Some scripts useful for red team activities

RedSnarf is a pen-testing / red-teaming tool for Windows environments

Kautilya - Tool for easy use of Human Interface Devices for offensive security and penetration testing.

Exploit the credentials present in files and memory

GoFetch is a tool to automatically exercise an attack plan generated by the BloodHound application.

Remote Recon and Collection

Simulates common user behaviour on local and remote Windows hosts.

FruityC2 is a post-exploitation (and open source) framework based on the deployment of agents on compromised machines. Agents are managed from a web interface under the control of an operator.

DNSDelivery provides delivery and in memory execution of shellcode or .Net assembly using DNS requests delivery channel.

My PowerShell bag of tricks