PowerHunt is a modular threat hunting framework written in PowerShell that leverages PowerShell Remoting for data collection on scale.
☆71Dec 12, 2024Updated last year
Alternatives and similar repositories for PowerHunt
Users that are interested in PowerHunt are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PowerHuntShares is an audit script designed in inventory, analyze, and report excessive privileges configured on Active Directory domains…☆1,065Oct 15, 2025Updated 11 months ago
- Reverse TCP Powershell has never been this paranoid. (basically an Opsec-safe reverse powershell)☆30Feb 4, 2022Updated 4 years ago
- Analyze ARP requests to identify hosts that are communicating with one another.☆19Jun 21, 2019Updated 7 years ago
- Rust Weaponization for Red Team Engagements.☆13Nov 14, 2022Updated 3 years ago
- ThreatBox is a standard and controlled Linux based attack platform. I've used a version of this for years. It started as a collection of …☆77Nov 19, 2024Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A curated list of tools for incident response☆21Sep 24, 2019Updated 7 years ago
- Manage Engine Decrypter☆29Oct 17, 2022Updated 3 years ago
- Simulation of manufacturing systems☆15Mar 15, 2022Updated 4 years ago
- Outil de récupération automatique des données AZure / Automated tool for dumping Azure configuration data☆22Sep 28, 2026Updated 2 weeks ago
- A framework for easy payloads development and deployment, collection of customizable XSS payloads☆26Feb 20, 2022Updated 4 years ago
- Dump NTDS with golden certificates and UnPAC the hash☆649Mar 20, 2024Updated 2 years ago
- ☆21Nov 23, 2022Updated 3 years ago
- Bloodhound Reporting for Blue and Purple Teams☆1,327Nov 15, 2025Updated 10 months ago
- Personal repository with handy cheatsheets.☆16Oct 23, 2016Updated 9 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- string encryption in Nim☆19Jun 15, 2024Updated 2 years ago
- A tool to create randomly insecure file shares that also contain unsecured credential files☆49Feb 16, 2026Updated 7 months ago
- A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228☆12Dec 13, 2021Updated 4 years ago
- FindUncommonShares is a Python script allowing to quickly find uncommon shares in vast Windows Domains, and filter by READ or WRITE acces…☆436Oct 1, 2026Updated last week
- A 2-in-1 toolset of https://github.com/x0rz/EQGRP_Lost_in_Translation and https://github.com/x0rz/EQGRP☆28Aug 2, 2019Updated 7 years ago
- The BackupOperatorToolkit contains different techniques allowing you to escalate from Backup Operator to Domain Admin☆178Feb 14, 2023Updated 3 years ago
- Assist analyst and threat hunters to understand Windows authentication logs and to analyze brutforce scenarios.☆21Jul 1, 2023Updated 3 years ago
- bowing to the AI Overlords.☆31Dec 18, 2024Updated last year
- ☆775Feb 3, 2026Updated 8 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Azure Deployment Templates for Mandiant Managed Huning☆12Jun 1, 2023Updated 3 years ago
- C# project to Reflectively load .Net assemblies in memory☆20Jun 19, 2024Updated 2 years ago
- All about CVE-2022-30190, aka follina, that is a RCE vulnerability that affects Microsoft Support Diagnostic Tools (MSDT) on Office apps …☆21Aug 6, 2022Updated 4 years ago
- .NET wrapper around LogonUserA to test creds☆13Jun 2, 2022Updated 4 years ago
- Quick lookup files for SUNBURST Backdoor☆12Dec 15, 2020Updated 5 years ago
- A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365☆792Oct 29, 2022Updated 3 years ago
- Regex based secret scanner for sccm deployment points sccmcontentlib$ shares. Find secrets automatically and download entire packages for…☆19Aug 13, 2025Updated last year
- Quietly enumerate an Active Directory Domain via LDAP parsing users, admins, groups, etc.☆499Jan 23, 2023Updated 3 years ago
- NetSPI PowerShell Scripts☆343Feb 10, 2026Updated 8 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Basic guide for performing a Physical PenTest - Nist 800-12, 800-53, 800-115, 800-152☆24Jan 1, 2023Updated 3 years ago
- A tool to generate a wordlist from the information present in LDAP, in order to crack passwords of domain accounts.☆379Mar 24, 2026Updated 6 months ago
- A SOCKS proxy for Citrix.☆100Dec 8, 2022Updated 3 years ago
- Threat Hunter's Knowledge Base☆24Dec 27, 2021Updated 4 years ago
- An SSH honeypot written entirely in Go.☆14Dec 4, 2025Updated 10 months ago
- Bypassing Kerberoast Detections with Modified KDC Options and Encryption Types☆420Mar 21, 2025Updated last year
- Oriana is a threat hunting tool that leverages a subset of Windows events to build relationships, calculate totals and run analytics. The…☆174Jun 10, 2021Updated 5 years ago