Powershell-Scripts-for-Hackers-and-Pentesters - An List of my Powershell scripts, commands and Blo

项目说明

<di="center">
<img width="260px" src="source/powershell_scripts.png" />
<a href = "#content" ><h3>Powershell Scripts For Hackers and Pentesters</h3></a>
<br>

<p><i>An List of Powershell Scripts, commands and technics for Pentesting Windows Machines
<br>
Scripts managed by <a href=" </a></i></p>
<br/>

-----------------

<b>Pwn windows machines without any Restrictions ⚠️</b>
<br><br>
<img src=" <img src=" <img src=" />
<img src="
<img src="
<img src=" System-Windows-blue">

-----------------

</div>
<br>

<!---<img src=" height=400 />-->

What is this ?

This Repository is an Collection of Powershell Scripts, Hacks ,Tutorials etc ..
These are my complete resoruce that i coded to use it to automate hacks , works etc ..

Usages ?

Enumerate your Powershell hacks , scripts usage (Adv) , to the next level . This Repository contains all kinds of Hacks and Powershell Tricks, from
basics to advance powershell commnads and scripts that will help you in day to day life of an IT Sectors , cybersecurity or Windows Automation
<br>

Down is an list of series which you can concern for your needs !
<br>

<!---<p><a href=" Look Here <p>--->

<h2>Contents</h2>

| Powershell Script Tier List | + MODULES + | Links |
|----------------------------------------------|-------------------------------------------------|--------------|
| Powershell Scripts & Commands | PS-010 (Ping-Play) | Look Here |
| | PS-020 (Attacks) | Look Here |
| | ps-030 (KEY-STOKES) | Look Here |
| | PS-040 (Win-Defender) | Look Here |
| | ps-050 (Silent-Installer) | Look Here |
| | PS-060 (Basics of Mimikaz) | Look Here |
| | PS-070-N (Ad Enumeration) | Look Here |
| | PS-070-M (Ad Enumeration) | Look Here |
| Complicated Part | SYSTEM32 | Look Here |
| | RE | Look Here |
| | SCRIPT-FILES.ps1 | Look Here |
| | UNDETECTABE-KEYLOGGER | Look Here |
| | Exfiltrating data using Powershell & WAV | Look Here|

<br> <br>

| Topic | Description | Link |
|----------------------------------------------|-------------------------------------------------|----------------------------------------------------|
| Basic of Windows Systems [Works, Methods etc] | Just an Bunch of Theories. If you are a Scirpt Kiddie (New to Hack) then this may help you understand things | Windows Basics |
| | WINDOWS-BASICS | Click Here |
| | WINDOWS-PENTEST-METHODS | Click Here |
| | COMMON-PORTS-AND-SERVICE | Click Here |
| | BASIC-COMMANDS | Click Here |
| | POWERSHELL VS CMD | Click Here |
| | JSON-IN-POWERSHELL | Click Here
| | XML-IN-POWERSHELL | Click Here
| Powershell Blogs | AUTOMATED POWERSHELL ATTACKS | Blog |
| | HOW KEYLOGGERS WORK ( BASICS ) InDept | Blog |
| | POWERSHELL TURLA SERIES | Blog |
| | USING PS1 ON KALI LINUX FOR PENTESTING | Blog |
| | Tracking Powershell based malware attacks | Blog |
| | Multi-stage Powershell script | Blog |
| | APT33 PowerShell Malware | Blog |
| | Lemon Duck Powershell Malware | Blog |
| | Hoaxcalls DDoS Botnet | Blog |
| | AgentTesla Delivered via a Malicious PowerPoint Add-In | Blog |
| | Machine learning from idea to reality: a PowerShell case study | Blog |
| | Multi-stage PowerShell script | BLog |
| | Inspecting a PowerShell Cobalt Strike Beacon | Blog |
| | Powershell Reflecti to inject dll | Blog |
| | Windows Triaging with Powershell | Blog |
| | Powershell used to drop an RE | Blog
| | PowerShell based attack targets Kazakhstan | Blog |
| | Exploring Powershell AMSI and logging E | Blog |
| | Charming Kitten Updates POWERSTAR with an InterPlanetary Twist | Blog |
| | Top-Tier Russian Organized Cybercrime Group Unveils Fileless Stealthy “PowerTrick” Backdoor for High-Value Targets | Blog |
| | Powershell static Analysis and Emote Results | Blog |
| | PowerPoint Dropper and Cryptocurrency Stealer | Blog
| | A border-hopping PlugX USB worm takes its act on the road | Blog |
| | Malicious Powershell Targeting UK Bank Customers | Blog |
| | PowerLess Trojan | Blog
| | An Journey to Uncover New Fully Undetectable PowerShell Backdoor | Blog |
| | A case of Powershell, Excel 4 Macros and VB6| Blog |
| | Emotet Technical Analysis - Part 1 | Blog |
| | Emotet Technical Analysis - Part 2 | Blog |
| | Re complete Powershell Malware | Blog |
| | HCrypt Injecting BitRAT using PowerShell, HTAs, and .NET | Blog |
| | PowerShell Dropper Deli Formbook | Blog |
| | Re Complex PowerShell Malware | Blog |
| | Threat Operation Re-emerges with New LNK and PowerShell | Blog |
| | The rise of .NET and Powershell Malware | Blog |
| | MoDi RAT attack pastes PowerShell commands | Blog |
| | Simple DGA Spotted in a Malicious PowerShell | Blog |
| | New PowerShell Obfuscation in Emotet Maldocs | Blog |
| | From virus alert to PowerShell Encrypted Loader | Blog |
| | Anatomy of a PowerShell Attack | Blog |
| | Deli Ransomware with Powershell Turla Series | Blog |
| | PRB-Backdoor-A Fully Loaded PowerShell Backdoor with E | Blog
| | Custom PowerShell RAT targets Germans seeking information about the Ukraine crisis | Blog |
| | Top 10 Pre MITRE ATT&CK Techniques | Blog
| | Detecting both ‘offensive’ and obfuscated PowerShell scripts in Splunk using Windows Event Log | Blog |
| | Analyzing Modern Malware Technique | Blog |
| | Emotet_network_protocol | Blog
| Powershell Conference | BlackHat-USA-2010-Kennedy-Kelly-PowerShell | PPT Link |
| | BlackHat-USA-2017-Robbins-Schroeder | PPT Link |
| | BlackHat-USA-2021-ProxyLogon is Just the Tip of the Iceberg | PPT Link |
| | BlackHat-EU-14-Hafif-Reflected-File-Download-A-New-Web-Attack | PPT Link |
| | BlackHat-USA-2014-Kazanciyan-Inttacks-wp | PPT Link |
| | BlackHat-USA-2017-PowerShell-Obfuscation Detection Using Science | PPT Link <br> Document |
| | BlackHat-Asia-2016-DSCompromised:A Windows DSC Attack Framework | PPT Link |
| | BlackHat-USA-2017-INFECTING-THE-ENTERPRISE-ABUSING-OFFICE365+POWERSHELL-FOR-CO | PPT Link
| | Splunk-USA-2016-hunting-the-known-unknowns-the-PowerShell-edition | PPT Link
| | BlackHat-USA-2019-PowerShell-module-for-administering-Office-365/Azure-AD| PPT Link
| | PowerShell for Penetration Testers | PPT Link |
| | HTTB-SECONF-Exploit-with-Shell-Rell-using-VBS | PPT Link |
| |
| Powershell Papers | CSI_KEEPING_POWERSHELL_SECURITY_MEASURES_TO_USE_AND_EMBRACE | Link
| Cheat Sheets for Powershell | Cheat Sheet by SanS | Cheat Sheet |
| | Cheat Sheet by Microsoft | Cheat Sheet
| | Reverse Shell Cheat Sheet | Cheat Sheer
| Powershell Books (Worth) | Windows Security Internals with PowerShell (Aid. 2024) | Redirect
| | The Complete Ultimate Windows Powershell Beginners Guide (Aid. 2017) | Redirect
| |PowerShell Automation and Scripting for Cybersecurity (Aid. 2023) | Redirect |
| Top Powershell Tools | Powershell Empire | Repo Link |
| | WinPwn | Repo Link |
| | PersistenceSniper| Code Link |
| | PowerLessShell | Repo Link |
| Free Powershell Books Around the Internet | Learning Powershell from Stack O Contributors | PDF Link |
| | Mastering Windows Powershell Scripting | PDF Link |
| | Learn Windows PowerShell In A Month Of Lunches | PDF Link |
| | EA - Windows Security Internals with PowerShell | PDF Link
| | Increased use of Powershell Attacks | PDF Link |
| | Hands-On Penetration Testing on Windows | PDF Link |
| | ScriptRunner PowerShell Security Ebook 2020 | PDF Link |

<!---
<h3>Basic of Windows Systems [ History , Works , methods , Tricks ] </h3>
<b>Just an Bunch of Theories . If you are an Scirpt Kiddie (New to Hack) Then this may help you to understand things </b><br><br>
WINDOWS-BASICS -> <a href=' > Look Here </a>
<br>
WINDOWS-PENTEST-METHODS -> <a href=" target="_blank" > Look Here </a><br>
COMMON-PORTS-AND-SERVICE -> <a href=" > Look Here </a>
<br>
BASIC-COMMANDS -> <a href=" > Look Here </a>

<h3> (PS) Powershell [ Scripts || Commands ] </h3>
PS-010 (Ping-Play)-> <a href=" > Look Here </a><br>
PS-020 (Attacks)-> <a href=" > Look Here </a><br>
ps-030 (KEY-STOKES) -> <a href=" > Look Here </a><br>
PS-040 (Win-Defender) -> <a href=" > Look Here </a><br>
ps-050 (Silent-Installer) -> <a href=" > Look Here </a><br>
PS-060 (Basics of Mimikaz) -> <a href=" > Look Here </a><br>
PS-070-N (Ad Enumeration) -><a href=" > Look Here</a><br>
PS-070-M (Ad Enumeration) -><a href=" > Look Here</a></br>

<h3> Complicated Part </h3>
SYSTEM32 -> <a href=" > Look Here </a><br>
RE -> <a href=" > Look Here </a><br>
SCRIPT-FILES.ps1 -> <a href=" > Look Here </a><br>
UNDETECTABE-KEYLOGGER -> <a href=" > Look Here </a><br>

<h3> Powershell Blogs <a href=" > # </a></h3>
AUTOMATED POWERSHELL ATTACKS -> <a href=" > Blog </a> <br>
POWERSHELL TURLA SERIES -> <a href=" > Blog</a><br>
<br>
---->
--------------------

<h3>RWH-Series</h3>
Real-world Series is a blog, where I will write the techniques and methods that Real World Hackers use to harm, breach, and crash data on Go, citizens, companies, etc .. <br><br>

Now All the RWH has been linked at the blog category.

-------------------

<p style="color:red;" > <b>ATTENCTION HERE : </b><br>This repository consists of several parts
PS-010 contains basic commands that are both fun and effective for attacking.
</p>

<b>Please Note that Windows's security will change daily and they will try to Improve the Security. So some scripts may or may not work. If Some new scripts don't work! without hesitation notify me at <a href=" Twitter </b></a><br>

Reach out to my Windows Security Blog where I Explained pentesting methods and how you can use this repository to achie Tasks ;) . [Still Writing] Link : <a href=" > Windows Pentest Series </a>
<br>

<!---Badge Here--->

:> Note ⚠️

If you find any wrong code / copyrighted content, please kindly inform me : . I will and fix the issue, else I will remove the content and create a new one. Thank you !!

:: Cloning This Repo on git will remove some Powershell scripts.

Impro and Tips

<p>How to use my Repositary as <a href=" > Book </a> </p>

<p>Improving at writing blogs on my website, but at present, I'm on a learning curve so I can't write all the blogs about it :(</p>

项目信息

开发语言：PowerShell

Star 数：495

技术要点

该项目属于红蓝攻防方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕An List of my Powershell scripts, commands and Blogs for windows Red Teaming. 展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。