netwrix / poshkatzLinks
PowerShell module for Mimikatz
☆214Updated 5 years ago
Alternatives and similar repositories for poshkatz
Users that are interested in poshkatz are comparing it to the libraries listed below
Sorting:
- A PowerShell script that aims to have a fully configured domain built in under 10 minutes, but also apply security configuration and hard…☆200Updated 4 years ago
- Detect and abuse risky SPNs☆262Updated 8 years ago
- Some PowerShell Stuff☆280Updated 3 years ago
- Some security related PowerShell scripts I developed.☆79Updated 7 years ago
- Module to provide PowerShell functions that abstract Win32 API functions☆248Updated last year
- ☆259Updated 9 months ago
- PowerShell based Active Directory Honey User Account Management with Universal Dashboards☆142Updated 6 years ago
- ☆163Updated 10 years ago
- ☆257Updated 3 years ago
- PowerShell script to find 'vulnerable' security-related GPOs that should be hardended☆200Updated 7 years ago
- Sysmon Tools for PowerShell☆231Updated 7 years ago
- Dashboarding and Tooling front-end for PowerShell Empire using PowerShell Universal Dashboard☆104Updated 6 years ago
- Smb Scanner from PingCastle☆124Updated 6 years ago
- Assorted scripts and one off things☆272Updated last year
- Easily define in-memory enums, structs, and Win32 functions in PowerShell☆225Updated 6 years ago
- Parse PowerShell and Security event logs for sensitive information.☆128Updated 6 years ago
- CScriptShell, a Powershell Host running within cscript.exe☆160Updated 8 years ago
- Misc. PowerShell scripts☆119Updated 9 years ago
- Some .ps1 scripts for pentesting☆136Updated 4 years ago
- PowerShell to Slack C2☆109Updated 7 years ago
- PowerShell and Cobalt Strike scripts for lateral movement using Excel 4.0 / XLM macros via DCOM (direct shellcode injection in Excel.exe)☆323Updated 6 years ago
- Memory Backed Powershell WebDav Server☆138Updated 4 years ago
- Check-LocalAdminHash is a PowerShell tool that attempts to authenticate to multiple hosts over either WMI or SMB using a password hash to…☆177Updated 2 years ago
- A little tool for detecting suspicious privileged NTLM connections, in particular Pass-The-Hash attack, based on event viewer logs.☆172Updated 6 months ago
- In case you didn't now how to restore the user password after a password reset (get the previous hash with DCSync)☆169Updated 8 years ago
- Monitors for DCSYNC and DCSHADOW attacks and create custom Windows Events for these events.☆141Updated 7 years ago
- Use powershell to list the RDP Connections History of logged-in users or all users☆264Updated 4 years ago
- PSAmsi is a tool for auditing and defeating AMSI signatures.☆393Updated 7 years ago
- ☆177Updated 6 years ago
- DEPRECATED SharpRoast is a C# port of various PowerView's Kerberoasting functionality.☆252Updated 6 years ago