PowerSploit - A PowerShell Post-Exploitation Framework

Six Degrees of Domain Admin

Nishang - Offensive PowerShell for red team, penetration testing and offensive security.

Empire is a PowerShell and Python post-exploitation agent.

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM.

netshell features all in version 2 powershell

NetRipper - Smart traffic sniffing for penetration testers

RedSnarf is a pen-testing / red-teaming tool for Windows environments

Active Directory Assessment and Privilege Escalation Script

This PowerShell Module has multiple functionalities, but one of the signature features of this module is the ability to parse Security logs on Domain Controllers providing easy to use access to AD …

Portia aims to automate a number of techniques commonly performed on internal network penetration tests after a low privileged account has been compromised.

Powershell Threat Hunting Module

Learn from Casey Smith @subTee

Connection-less Powershell Persistent and Resilient Backdoor

Win 10/11 related research

Windows 10 (v1803+) ActivitiesCache.db parsers (SQLite, PowerShell, .EXE)

Lists of sources and utilities utilized to hunt, detect and prevent evildoers.

PoshSec PowerShell Module

A collection of post-exploitation tools for network red teaming.

Materials of Workshop presented at DEFCON 25