PowerShell
358 libraries mined from the psgallery registry · NADA target: 400
- 0x6d69636b/windows_hardening
- 0xsyr0/OSCP
- 12Knocksinna/Office365itpros
- 411Hall/JAWS
- 61106960/adPEAS
- A-mIn3/WINspect
- abbodi1406/ConsumerESU
- abgox/PSCompletions
- actions/runner-images
- adbertram/Random-PowerShell-Work
- admindroid-community/powershell-scripts
- adrecon/ADRecon
- AdrianVollmer/PowerHub
- AgentRev/WindowsAppsUnfukker
- ahmedkhlief/Ninja
- alanrenouf/vCheck-vSphere
- AleksaMCode/WiFi-password-stealer
- antonioCoco/ConPtyShell
- api0cradle/UltimateAppLockerByPassList
- arcadesdude/BRU
- Arvanaghi/SessionGopher
- asheroto/winget-install
- auto-yui-patch/fiddler-everywhere-patch-automated
- AutomatedLab/AutomatedLab
- Azure/Azure-Functions
- Azure/Azure-Network-Security
- Azure/azure-sdk
- Azure/Azure-Verified-Modules
- Azure/enterprise-azure-policy-as-code
- Azure/Enterprise-Scale
- Azure/GPT-RAG
- Azure/ResourceModules
- Azure/SimuLand
- AzureAD/AzureADAssessment
- B3hnamR/PsiphonOverMITM
- Badgerati/Pode
- Bananz0/GalaxyBookEnabler
- BC-SECURITY/Beginners-Guide-to-Obfuscation
- Bert-JanP/Incident-Response-Powershell
- besimorhino/powercat
- BloodHoundAD/BARK
- bluecapesecurity/PWF
- bodadotsh/npm-security-best-practices
- BornToBeRoot/PowerShell
- builtbybel/bloatbox
- calebstewart/CVE-2021-1675
- canix1/ADACLScanner
- catppuccin/qbittorrent
- chawyehsu/dorado
- chen0416ccc-cpu/codex-windows-fast-patch-skill
- chocolatey-archive/chocolatey
- chocolatey-community/boxstarter
- ChrisTitusTech/powershell-profile
- ChrisTitusTech/win10script
- ChrisTitusTech/winutil
- cisagov/ScubaGear
- cisagov/Sparrow
- Cloud-Architekt/AzureAD-Attack-Defense
- cloudbase/windows-imaging-tools
- clymb3r/PowerShell
- cmderdev/cmder
- corbindavenport/nexus-tools
- CrowdStrike/CRT
- curi0usJack/luckystrike
- cyberark/ACLight
- cyberark/SkyArk
- cyberdefenders/DetectionLabELK
- d0nkeys/redteam
- d4t4s3c/OffensiveReverseShellCheatSheet
- dafthack/DomainPasswordSpray
- dafthack/GraphRunner
- dafthack/MailSniper
- dafthack/MFASweep
- dafthack/MSOLSpray
- dafthack/PowerMeta
- dahlbyk/posh-git
- damienvanrobaeys/Run-in-Sandbox
- danielbohannon/Invoke-CradleCrafter
- danielbohannon/Invoke-DOSfuscation
- danielbohannon/Invoke-Obfuscation
- danielbohannon/Revoke-Obfuscation
- DarkCoderSc/PowerRemoteDesktop
- darkquasar/AzureHunter
- dartraiden/NVIDIA-patcher
- dataplat/dbatools
- davehull/Kansa
- davidprowe/BadBlood
- debridmediamanager/zurg-testing
- DeEpinGh0st/Erebus
- dell/iDRAC-Redfish-Scripting
- denverdino/k8s-for-docker-desktop
- devblackops/Terminal-Icons
- dfinke/ImportExcel
- directorcia/Office365
- Disassembler0/Win10-Initial-Setup-Script
- djdallmann/GamingPCSetup
- dotnet/core
- dracula/powershell
- duzyn/scoop-cn
- EmpireMediaScience/A1111-Web-UI-Installer
- EmpireProject/Empire
- empty-233/tencent-sandbox
- enigma0x3/Generate-Macro
- enjoiz/Privesc
- EvotecIT/ADEssentials
- EvotecIT/GPOZaurr
- EvotecIT/PSWinReporting
- EvotecIT/PSWriteHTML
- EvotecIT/Testimo
- FalsePhilosopher/badusb
- felixrieseberg/windows-development-environment
- FelixSelter/JEnv-for-Windows
- fleschutz/PowerShell
- floatboatai/selfware.md
- FR33THYFR33THY/Ultimate
- FriendsOfMDT/PSD
- FuzzySecurity/PowerShell-Suite
- gdedrouas/Exchange-AD-Privesc
- Gerenios/AADInternals
- GhostPack/PSPKIAudit
- giMini/PowerMemory
- GoFetchAD/GoFetch
- GuDaStudio/commands
- GuDaStudio/skills
- hak5/bashbunny-payloads
- hak5/usbrubberducky-payloads
- HarmVeenstra/Powershellisfun
- hausec/ADAPE-Script
- hausec/PowerZure
- hotvulcan/Thanos.sh
- I-Am-Jakoby/Flipper-Zero-BadUSB
- I-Am-Jakoby/PowerShell-for-Hackers
- In3x0rabl3/OSEP
- InfosecMatter/Minimalistic-offensive-security-tools
- invictus-ir/Microsoft-Extractor-Suite
- ios12checker/Windows-Maintenance-Tool
- itm4n/PrivescCheck
- ItzLevvie/MicrosoftTeams-msinternal
- jakehildreth/Locksmith
- jamesstringer90/Easy-GPU-PV
- JanDeDobbeleer/oh-my-posh2
- janikvonrotz/awesome-powershell
- javaht/claude-desktop-zh-cn
- javinizer/Javinizer
- jayharris/dotfiles-windows
- Jaykul/PowerLine
- JayRHa/EndpointAnalyticsRemediationScripts
- jdhitsolutions/PSScriptTools
- jenkinsci/docker
- jeppevinkel/jellyfin-tizen-builds
- jessety/pm2-installer
- jfmaes/LazySign
- joefitzgerald/packer-windows
- JoelGMSec/AutoRDPwn
- JoelGMSec/Invoke-Stealth
- Johnng007/Live-Forensicator
- johnthebrit/AzureMasterClass
- johnthebrit/DevOpsMC
- johnthebrit/PowerShellMC
- joonro/ConEmu-Color-Themes
- JulianHayward/Azure-MG-Sub-Governance-Reporting
- JulietMirambo/Units_of_Measure_Harmonization-intelligence-platform
- kelleyma49/PSFzf
- Kevin-Robertson/Invoke-TheHash
- Kevin-Robertson/Powermad
- kmkz/Pentesting
- l0ss/Grouper
- last-byte/PersistenceSniper
- lazywinadmin/PowerShell
- leddt/visualstudio-colors-solarized
- LeDragoX/Win-Debloat-Tools
- Leo4j/Invoke-ADEnum
- leoloobeek/LAPSToolkit
- LETHAL-FORENSICS/MemProcFS-Analyzer
- LETHAL-FORENSICS/Microsoft-Analyzer-Suite
- lextm/windowsterminal-shell
- Lifailon/rudocs
- lintstar/LSTAR
- love2d-community/awesome-love2d
- lptstr/winfetch
- ltx0101/SlimBrave
- LuemmelSec/Pentest-Tools-Collection
- lukesampson/concfg
- lukesampson/pshazz
- lukesampson/psutils
- madbomb122/BlackViperScript
- mandiant/commando-vm
- mandiant/flare-vm
- mandiant/Mandiant-Azure-AD-Investigator
- mandiant/ThreatPursuit-VM
- Marshall-Hallenbeck/red_team_attack_lab
- mattifestation/CimSweep
- mattifestation/PowerShellArsenal
- meetrevision/playbook
- mgeeky/cobalt-arsenal
- mgeeky/Penetration-Testing-Tools
- mgeeky/ProtectMyTooling
- Micke-K/IntuneManagement
- microsoft/AaronLocker
- microsoft/AL
- microsoft/ARI
- microsoft/AzureMonitorCommunity
- microsoft/CSS-Exchange
- microsoft/DataConnectors
- microsoft/EntraExporter
- microsoft/hve-core
- microsoft/MSLab
- microsoft/PowerShellForGitHub
- microsoft/PowerStig
- microsoft/Windows-Containers
- microsoft/windows-dev-box-setup-scripts
- microsoft/Windows-Sandbox
- microsoft/WindowsDeveloperConfig
- microsoft/work-iq
- MicrosoftDocs/PowerShell-Docs
- MicrosoftDocs/Virtualization-Documentation
- microsoftgraph/powershell-intune-samples
- mikeslattery/tunic
- mitre-attack/attack-arsenal
- monoxgas/sRDI
- Mr-Un1k0d3r/RedTeamPowershellScripts
- MScholtes/PS2EXE
- MSEndpointMgr/ConfigMgr
- MSEndpointMgr/Intune
- mwrock/packer-templates
- MysticFoxDE/WINDOWS-OPTIMIZATIONS
- n1snt/Windows-Debloater
- nccgroup/azucar
- nccgroup/redsnarf
- neilpa/cmd-colors-solarized
- NetSPI/MicroBurst
- NetSPI/PESecurity
- NetSPI/PowerHuntShares
- NetSPI/PowerUpSQL
- nettitude/PoshC2
- nettitude/PoshC2_Old
- nickvourd/Windows-Local-Privilege-Escalation-Cookbook
- nightroman/Invoke-Build
- nocomp/Flipper_Zero_Badusb_hack5_payloads
- Nonary/MonitorSwapAutomation
- Nonary/ResolutionAutomation
- NotMedic/NetNTLMtoSilverTicket
- nsacyber/Event-Forwarding-Guidance
- ntdevlabs/nano11
- ntdevlabs/tiny11builder
- nullbind/Powershellery
- NytroRST/NetRipper
- nyxgeek/o365recon
- OfficeDev/O365-InvestigationTooling
- okibcn/wslcompact
- okieselbach/Intune
- olafhartong/sysmon-modular
- omerbsezer/Fast-Kubernetes
- openhab/openhab-distro
- openiddict/openiddict-samples
- Orange-Cyberdefense/GOAD
- orlyjamie/mimikittenz
- OTRF/Microsoft-Sentinel2Go
- p3nt4/Invoke-SocksProxy
- parsec-cloud/Parsec-Cloud-Preparation-Tool
- pbatard/Fido
- peewpw/Invoke-PSImage
- peewpw/Invoke-WCMDump
- pester/Pester
- poshbotio/PoshBot
- PowerShellEmpire/PowerTools
- PowerShellMafia/PowerSploit
- PowerShellOrg/Plaster
- PrateekKumarSingh/AzViz
- proxb/PoshRSJob
- psake/psake
- psget/psget
- psmux/psmux
- pxlrbt/move-wsl
- QAX-A-Team/CobaltStrike-Toolset
- Qetesh/logi-options-plus-mini
- QQBackup/qq-win-db-key
- RamblingCookieMonster/PowerShell
- Raphire/Win11Debloat
- rasta-mouse/Sherlock
- redcanaryco/invoke-atomicredteam
- RedSiege/Egress-Assess
- RedSiege/WMImplant
- rltvty2/ulli
- rmbolger/Posh-ACME
- Romanitho/Winget-AutoUpdate
- rootsecdev/Azure-Red-Team
- RReverser/WiFi-Password
- rsmudge/ElevateKit
- rvrsh3ll/Misc-Powershell-Scripts
- rvrsh3ll/TokenTactics
- S3cur3Th1sSh1t/PowerSharpPack
- safebuffer/vulnerable-AD
- samratashok/ADModule
- samratashok/Kautilya
- samratashok/nishang
- sans-blue-team/DeepBlueCLI
- scipag/HardeningKitty
- ScoopInstaller/Extras
- ScoopInstaller/Install
- ScoopInstaller/Main
- ScoopInstaller/Scoop
- scriptrunner/ActionPacks
- Scrut1ny/MB-Premium-Reset
- scythe-io/purple-team-exercise-framework
- sdushantha/recycle-bin-themes
- secabstraction/PowerCat
- secretGeek/AwesomeCSV
- securityjoes/MasterParser
- Semperis/EntraGoat
- shiftavenue/awesome-azure-learning
- silverhack/monkey365
- simeononsecurity/Windows-Optimize-Harden-Debloat
- SkipToTheEndpoint/OpenIntuneBaseline
- SpecterOps/at-ps
- SpotX-Official/SpotX
- stank58/Powershell-Scripts
- StefanScherer/docker-windows-box
- StefanScherer/windows-docker-machine
- subat0mik/Misconfiguration-Manager
- SwiftOnSecurity/OrgKit
- Sycnex/Windows10Debloater
- T0pCyber/hawk
- t4rra/CCStopper
- techspence/ScriptSentry
- teeotsa/windows-11-debloat
- The-Viper-One/PsMapExec
- The-Virtual-Desktop-Team/Virtual-Desktop-Optimization-Tool
- the-xentropy/xencrypt
- ThioJoe/Windows-Sandbox-Tools
- ThioJoe/Windows-Super-God-Mode
- ThomasKur/M365Documentation
- threatexpress/red-team-scripts
- tibold/svg-explorer-extension
- tide-emergency/yingji
- tihanyin/PSSW100AVB
- tobor88/PowerShell-Red-Team
- tokyoneon/Chimera
- tomwechsler/Active_Directory_Advanced_Threat_Hunting
- TonyPhipps/SIEM
- toonight/get-shit-done-for-antigravity
- Upinel/BetterRDP
- valleyofdoom/PC-Tuning
- vexx32/PSKoans
- VFrontDe-Org/ESXi-Customizer-PS
- vinijmoura/Azure-DevOps
- vmware-archive/PowerCLI-Example-Scripts
- vors/ZLocation
- W4RH4WK/Debloat-Windows-10
- Windos/BurntToast
- WindowsExploits/Exploits
- woodruffw/ff2mpv
- Yamato-Security/WELA-deprecated
- yanghaoi/CobaltStrike_CNA
- YerongAI/Office-Tool
- ZHacker13/ReverseTCPShell
- zhaoxuya520/reverse-skill
- zoicware/RemoveWindowsAI