Pentest · Windows Utilities

Windows Utilities

• PowerShellMafia/PowerSploit on GitHub, opens in a new tab

  13.1Kstars

  PowerShell Post-Exploitation Framework.

  PowerShell·Other·dormant·6 years agoarchived

• AlessandroZ/LaZagne on GitHub, opens in a new tab

  11Kstars

  Credentials recovery project.

  Python·GNU Lesser General Public License v3.0·steady·11 months ago

• BC-SECURITY/Empire on GitHub, opens in a new tab

  5.3Kstars

  Post-exploitation and adversary emulation framework with PowerShell, Python, and C# agents.

  PowerShell·BSD 3-Clause "New" or "Revised" License·active·5 days ago

• GhostPack/Rubeus on GitHub, opens in a new tab

  5.1Kstars

  Toolset for raw Kerberos interaction and abuses.

  C#·Other·active·3 months ago

• SpiderLabs/Responder on GitHub, opens in a new tab

  4.9Kstars

  Link-Local Multicast Name Resolution (LLMNR), NBT-NS, and mDNS poisoner.

  Python·GNU General Public License v3.0·dormant·6 years agoarchived

• cobbr/Covenant on GitHub, opens in a new tab

  4.7Kstars

  ASP.NET Core application that serves as a collaborative command and control platform for red teamers.

  C#·GNU General Public License v3.0·slowing·2 years ago

• dafthack/MailSniper on GitHub, opens in a new tab

  3.3Kstars

  Modular tool for searching through email in a Microsoft Exchange environment, gathering the Global Address List from Outlook Web Access (OWA) and Exchange Web Services (EWS), and more.

  PowerShell·MIT License·slowing·last year

• Kevin-Robertson/Inveigh on GitHub, opens in a new tab

  3Kstars

  Windows PowerShell ADIDNS/LLMNR/mDNS/NBNS spoofer/machine-in-the-middle tool.

  C#·BSD 3-Clause "New" or "Revised" License·steady·9 months ago

• rabbitstack/fibratus on GitHub, opens in a new tab

  2.5Kstars

  Tool for exploration and tracing of the Windows kernel.

  Go·Other·active·5 days ago

• sensepost/ruler on GitHub, opens in a new tab

  2.3Kstars

  Abuses client-side Outlook features to gain a remote shell on a Microsoft Exchange server.

  Go·Other·slowing·2 years ago

• taviso/ctftool on GitHub, opens in a new tab

  1.7Kstars

  Interactive Collaborative Translation Framework (CTF) exploration tool capable of launching cross-session edit session attacks.

  C·Apache License 2.0·dormant·5 years ago

• byt3bl33d3r/DeathStar on GitHub, opens in a new tab

  1.6Kstars

  Python script that uses Empire's RESTful API to automate gaining Domain Admin rights in Active Directory environments.

  Python·GNU General Public License v3.0·slowing·3 years ago

• nccgroup/redsnarf on GitHub, opens in a new tab

  1.2Kstars

  Post-exploitation tool for retrieving password hashes and credentials from Windows workstations, servers, and domain controllers.

  PowerShell·Apache License 2.0·dormant·6 years ago

• trustedsec/ridenum on GitHub, opens in a new tab

  315stars

  Python script that can enumerate all users from a Windows Domain Controller and crack those user's passwords using brute-force.

  Python·Other·slowing·2 years ago

• nccgroup/SCOMDecrypt on GitHub, opens in a new tab

  130stars

  Retrieve and decrypt RunAs credentials stored within Microsoft System Center Operations Manager (SCOM) databases.

  C#·slowing·3 years ago