CLI

CredPhish is a PowerShell script designed to invoke legitimate credential prompts and exfiltrate passwords over DNS.

Sharperner is a tool written in CSharp that generate .NET dropper with AES and XOR obfuscated shellcode. Generated executable can possibly bypass signature check but I cant be sure it can bypass heuristic scanning.

Dotnet-wtrace is a command-line tool for reading trace events emitted by .NET Core applications.

It is built on top of PKISolution's PSPKI toolkit (Microsoft Public License). This repo contains a newer version of PSPKI than what's available in the PSGallery (see the PSPKI directory). Vadims Podans (the creator of PSPKI) graci

A repo for powershell module that helps Chia Plotting

Send push notifications to mobile devices and desktops from PowerShell using the Pushover service!

PowerShell Module containing a collection of powerfull filesystem helpers

Active Directory Generator for upcoming domain pivoting course.

MemProcFS-Analyzer.ps1 is a PowerShell script utilized to simplify the usage of MemProcFS and to assist with the memory analysis workflow.

Script, ScriptBlock and module performance profiler for PowerShell 5, and PowerShell 7.

Windows/x64 - Inject All Processes with Meterpreter Reverse Shell (655 Bytes)

Further the state of M365 security by authoring a PowerShell script that automates the security assessment of Microsoft Office 365 environments.

This is a great little library to visualize long running command line tasks.

Table of contents: Module description Installation and pre-requisites Roles and license requirements Functions included in the module Files generated

!!! EARLY ACCESS !!! Current status is "Works for me - TM" but I'd be keen to get feedback from others - particularly on the Linux side. Raise an issu

Detect webshells dropped on Microsoft Exchange servers after 0day compromises This script looks for webshells dropped on Microsoft Exchange servers wh

Easy Asynchronous Event-Driven Scripting with PowerShell

This will build an executable which executes a Full Language Mode powershell session even when Constrained Language Mode is enabled.

Conditional Access policies, at their simplest, are if-then statements. If a user wants to access a resource, they must complete an action.

Executes position independent shellcode from an encrypted zip Get PIC code from your assembly either by using donut or metasploit or cobaltstrike RAW format.

Powerful and fast command line tool to rewrite git branches powered by .NET, LibGit2Sharp and Roslyn.

I have created a small C# project that requests a Ticket Granting Service ticket using KerberosSecurityTokenProvider to use for Kerberoasting. I started the project for educational purposes only, but the tool works fine and is not

Command line tool to extract/decrypt the password that was stored in the LSA by SysInternals AutoLogon

PowerShell script for hardening Siemens Simatic PCS 7 servers

This is the repository of kalk, a powerful command line calculator app for developers.

A small script for Windows 10 Home users to compact their WSL2 disks

A simple build interface for Unity CLI. Support all platforms without executeMethod option

MusicSharp is a CLI based music player for Windows written in C# with the goal of being minimalistic and light on resources.

This repository outlines an automated testing approach for Azure Policies. The approach is fundamentally based on behavior-driven development (BDD) to improve communication between developers, security experts and compliance offic

MFASweep is a PowerShell script that attempts to log in to various Microsoft services using a provided set of credentials and will attempt to identify if MFA is enabled.

A port of FuzzySecurity's UrbanBishop project for inline shellcode execution. The execution vector uses a delegate vs an APC on a suspended threat at ntdll!RtlExitUserThread in UrbanBishop

A quickly written C# application that allows you to run SSH commands against a host or list of hosts.

This is a SecretManagement extension for LastPass. It leverages the lastpass-cli to interact with LastPass.