| 1 |
winutil |
36224 |
1996 |
PowerShell |
175 |
Chris Titus Tech’s Windows Utility - Install Programs, Tweaks, Fixes, and Updates |
2025-06-18T21:48:36Z |
| 2 |
Scoop |
22484 |
1459 |
PowerShell |
301 |
A command-line installer for Windows. |
2025-05-26T12:03:31Z |
| 3 |
Win11Debloat |
21655 |
894 |
PowerShell |
28 |
A simple, easy to use PowerShell script to remove pre-installed apps, disable telemetry, as well as perform various other changes to customize, declutter and improve your Windows experience. Win11Debloat works for both Windows 10 and Windows 11. |
2025-06-17T21:08:38Z |
| 4 |
core |
21462 |
4925 |
PowerShell |
310 |
.NET news, announcements, release notes, and more! |
2025-06-23T22:00:14Z |
| 5 |
Windows10Debloater |
18546 |
2065 |
PowerShell |
284 |
Script to remove Windows 10 bloatware. |
2023-03-10T04:15:01Z |
| 6 |
SpotX |
17361 |
897 |
PowerShell |
2 |
SpotX patcher used for patching the desktop version of Spotify |
2025-06-19T12:14:01Z |
| 7 |
Atlas |
15852 |
574 |
PowerShell |
4 |
🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability. |
2025-06-23T18:32:02Z |
| 8 |
PowerSploit |
12411 |
4687 |
PowerShell |
67 |
PowerSploit - A PowerShell Post-Exploitation Framework |
2020-08-17T23:19:49Z |
| 9 |
tiny11builder |
12182 |
989 |
PowerShell |
145 |
Scripts to build a trimmed-down Windows 11 image. |
2024-11-17T19:45:03Z |
| 10 |
Office-Tool |
11422 |
947 |
PowerShell |
1 |
Office Tool Plus localization projects. |
2025-06-21T13:34:09Z |
| 11 |
runner-images |
11369 |
3367 |
PowerShell |
42 |
GitHub Actions runner images |
2025-06-24T03:49:38Z |
| 12 |
BloodHound-Legacy |
10226 |
1775 |
PowerShell |
73 |
Six Degrees of Domain Admin |
2025-06-16T20:12:11Z |
| 13 |
winget-pkgs |
9468 |
5168 |
PowerShell |
946 |
The Microsoft community Windows Package Manager manifest repository |
2025-06-24T03:52:10Z |
| 14 |
blazor |
9327 |
649 |
PowerShell |
0 |
Blazor moved to https://github.com/dotnet/aspnetcore |
2021-02-23T15:13:56Z |
| 15 |
nishang |
9280 |
2505 |
PowerShell |
16 |
Nishang - Offensive PowerShell for red team, penetration testing and offensive security. |
2024-04-25T19:39:44Z |
| 16 |
Sophia-Script-for-Windows |
8419 |
610 |
PowerShell |
0 |
:zap: The most powerful PowerShell module for fine-tuning Windows |
2025-06-22T14:00:14Z |
| 17 |
posh-git |
7968 |
819 |
PowerShell |
86 |
A PowerShell environment for Git |
2024-09-02T15:03:06Z |
| 18 |
Empire |
7641 |
2872 |
PowerShell |
64 |
Empire is a PowerShell and Python post-exploitation agent. |
2020-01-19T22:50:59Z |
| 19 |
flare-vm |
7391 |
1000 |
PowerShell |
19 |
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM. |
2025-06-23T11:46:41Z |
| 20 |
commando-vm |
7261 |
1325 |
PowerShell |
7 |
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com |
2024-09-24T19:14:18Z |
| 21 |
docker |
7038 |
4638 |
PowerShell |
16 |
Docker official jenkins repo |
2025-06-17T13:22:01Z |
| 22 |
GOAD |
6525 |
912 |
PowerShell |
90 |
game of active directory |
2025-03-10T21:25:49Z |
| 23 |
Debloat-Windows-10 |
6185 |
839 |
PowerShell |
33 |
A Collection of Scripts Which Disable / Remove Windows 10 Features and Apps |
2024-11-04T18:26:57Z |
| 24 |
Win-Debloat-Tools |
6089 |
296 |
PowerShell |
23 |
Re-imagining Windows like a minimal OS install, already debloated with minimal impact for most functionality. |
2025-06-14T13:39:47Z |
| 25 |
Flipper-Zero-BadUSB |
6032 |
758 |
PowerShell |
52 |
Repository for my flipper zero badUSB payloads. Now almost entirely plug and play. |
2024-06-15T09:43:09Z |
| 26 |
K8tools |
6003 |
2070 |
PowerShell |
5 |
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix) |
2025-01-25T06:32:52Z |
| 27 |
windows-defender-remover |
5702 |
380 |
PowerShell |
32 |
A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11. |
2025-06-06T18:19:17Z |
| 28 |
oh-my-posh2 |
5195 |
285 |
PowerShell |
0 |
A prompt theming engine for Powershell |
2021-02-16T07:48:59Z |
| 29 |
awesome-powershell |
5147 |
433 |
PowerShell |
4 |
A curated list of delightful PowerShell modules and resources |
2025-04-14T06:25:33Z |
| 30 |
k8s-for-docker-desktop |
5029 |
1125 |
PowerShell |
34 |
为Docker Desktop for Mac/Windows开启Kubernetes和Istio。 |
2025-03-07T07:13:27Z |
| 31 |
UnattendedWinstall |
4918 |
500 |
PowerShell |
55 |
Personalized Unattended Answer Files that helps automatically debloat and customize Windows 10 & 11 during the installation process. |
2024-12-05T11:39:14Z |
| 32 |
Easy-GPU-PV |
4910 |
493 |
PowerShell |
240 |
A Project dedicated to making GPU Partitioning on Windows easier! |
2024-06-22T08:22:34Z |
| 33 |
usbrubberducky-payloads |
4857 |
1499 |
PowerShell |
11 |
The Official USB Rubber Ducky Payload Repository |
2025-05-28T23:12:21Z |
| 34 |
Win10-Initial-Setup-Script |
4695 |
1074 |
PowerShell |
30 |
PowerShell script for automation of routine tasks done after fresh installations of Windows 10 / Server 2016 / Server 2019 |
2021-05-28T08:15:14Z |
| 35 |
machinelearning-samples |
4629 |
2700 |
PowerShell |
159 |
Samples for ML.NET, an open source and cross-platform machine learning framework for .NET. |
2024-07-27T09:39:50Z |
| 36 |
RedTeaming-Tactics-and-Techniques |
4295 |
1087 |
PowerShell |
9 |
Red Teaming Tactics and Techniques |
2024-08-22T07:17:31Z |
| 37 |
Invoke-Obfuscation |
4010 |
792 |
PowerShell |
11 |
PowerShell Obfuscator |
2023-08-10T23:49:06Z |
| 38 |
win10script |
3509 |
1042 |
PowerShell |
0 |
This is the Ultimate Windows 10 Script from a creation from multiple debloat scripts and gists from github. |
2022-06-24T03:57:47Z |
| 39 |
WinPwn |
3508 |
537 |
PowerShell |
2 |
Automation for internal Windows Penetrationtest / AD-Security |
2024-11-26T07:50:22Z |
| 40 |
svg-explorer-extension |
3427 |
198 |
PowerShell |
48 |
Extension module for Windows Explorer to render SVG thumbnails, so that you can have an overview of your SVG files |
2020-06-01T14:47:56Z |
| 41 |
PrivescCheck |
3340 |
471 |
PowerShell |
0 |
Privilege Escalation Enumeration Script for Windows |
2025-06-11T13:51:22Z |
| 42 |
OSCP |
3251 |
684 |
PowerShell |
0 |
OSCP Cheat Sheet |
2025-06-08T14:38:05Z |
| 43 |
Pester |
3189 |
476 |
PowerShell |
152 |
Pester is the ubiquitous test and mock framework for PowerShell. |
2025-05-10T15:54:06Z |
| 44 |
MailSniper |
3088 |
583 |
PowerShell |
20 |
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain. |
2024-08-07T18:11:58Z |
| 45 |
Thanos.sh |
2954 |
289 |
PowerShell |
46 |
if you are Thanos(root), this command could delete half your files randomly |
2022-06-27T09:16:53Z |
| 46 |
sysmon-modular |
2813 |
623 |
PowerShell |
30 |
A repository of sysmon configuration modules |
2024-08-21T12:08:06Z |
| 47 |
chocolatey |
2801 |
341 |
PowerShell |
138 |
[DEPRECATED - https://github.com/chocolatey/choco] Chocolatey NuGet - Like apt-get, but for windows. |
2017-03-03T15:02:50Z |
| 48 |
bashbunny-payloads |
2779 |
1472 |
PowerShell |
21 |
The Official Bash Bunny Payload Repository |
2025-02-16T21:56:37Z |
| 49 |
PowerShell |
2747 |
484 |
PowerShell |
1 |
500+ free PowerShell scripts (.ps1) for Linux, Mac OS, and Windows. |
2025-06-23T11:03:26Z |
| 50 |
PowerShell |
2735 |
728 |
PowerShell |
10 |
PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, …) |
2024-06-12T21:55:16Z |
| 51 |
Penetration-Testing-Tools |
2734 |
532 |
PowerShell |
3 |
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I’ve developed over years for Red Teaming/Pentesting/IT Security audits purposes. |
2023-06-27T19:16:49Z |
| 52 |
Terminal-Icons |
2683 |
120 |
PowerShell |
50 |
A PowerShell module to show file and folder icons in the terminal |
2024-08-06T15:47:02Z |
| 53 |
PowerShell-Suite |
2674 |
771 |
PowerShell |
7 |
My musings with PowerShell |
2021-11-19T12:18:24Z |
| 54 |
Active-Directory-Exploitation-Cheat-Sheet |
2601 |
520 |
PowerShell |
1 |
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. |
2022-12-08T11:53:00Z |
| 55 |
ImportExcel |
2596 |
414 |
PowerShell |
11 |
PowerShell module to import/export Excel spreadsheets, without Excel |
2025-04-23T12:16:05Z |
| 56 |
PowerUpSQL |
2593 |
479 |
PowerShell |
21 |
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server |
2024-12-12T18:09:39Z |
| 57 |
dbatools |
2590 |
834 |
PowerShell |
266 |
🚀 SQL Server automation and instance migrations have never been safer, faster or freer |
2025-06-17T08:34:38Z |
| 58 |
Fido |
2571 |
238 |
PowerShell |
1 |
A PowerShell script to download Windows or UEFI Shell ISOs |
2025-06-12T16:42:44Z |
| 59 |
windows_hardening |
2474 |
325 |
PowerShell |
8 |
HardeningKitty and Windows Hardening Settings |
2025-06-03T16:56:40Z |
| 60 |
AzureAD-Attack-Defense |
2312 |
340 |
PowerShell |
8 |
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected. |
2025-04-24T05:39:33Z |
| 61 |
sRDI |
2310 |
478 |
PowerShell |
10 |
Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode |
2023-11-15T10:53:00Z |
| 62 |
DeepBlueCLI |
2289 |
370 |
PowerShell |
7 |
None |
2023-10-14T17:06:57Z |
| 63 |
powercat |
2252 |
484 |
PowerShell |
9 |
netshell features all in version 2 powershell |
2024-03-05T18:05:07Z |
| 64 |
PowerRemoteDesktop |
2215 |
254 |
PowerShell |
9 |
Remote Desktop entirely coded in PowerShell. |
2024-08-01T14:19:19Z |
| 65 |
PowerShell-Docs |
2191 |
1626 |
PowerShell |
29 |
The official PowerShell documentation sources |
2025-06-23T22:03:14Z |
| 66 |
MicroBurst |
2187 |
324 |
PowerShell |
4 |
A collection of scripts for assessing Microsoft Azure security |
2025-06-09T20:40:42Z |
| 67 |
ScubaGear |
2181 |
292 |
PowerShell |
192 |
Automation to assess the state of your M365 tenant against CISA’s baselines |
2025-06-24T04:00:59Z |
| 68 |
Invoke-PSImage |
2179 |
399 |
PowerShell |
5 |
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute |
2019-09-23T15:17:03Z |
| 69 |
vulnerable-AD |
2144 |
415 |
PowerShell |
9 |
Create a vulnerable active directory that’s allowing you to test most of the active directory attacks in a local lab |
2024-04-12T18:06:21Z |
| 70 |
BadBlood |
2143 |
285 |
PowerShell |
5 |
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time. |
2023-06-07T17:14:17Z |
| 71 |
PowerTools |
2120 |
822 |
PowerShell |
4 |
PowerTools is a collection of PowerShell projects with a focus on offensive operations. |
2021-12-28T21:00:42Z |
| 72 |
AutomatedLab |
2102 |
377 |
PowerShell |
36 |
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc. |
2025-06-23T15:28:55Z |
| 73 |
PersistenceSniper |
1996 |
204 |
PowerShell |
3 |
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte |
2024-12-11T16:45:04Z |
| 74 |
Fast-Kubernetes |
1995 |
594 |
PowerShell |
0 |
This repo covers Kubernetes with LABs: Kubectl, Pod, Deployment, Service, PV, PVC, Rollout, Multicontainer, Daemonset, Taint-Toleration, Job, Ingress, Kubeadm, Helm, etc. |
2025-04-14T08:54:11Z |
| 75 |
UltimateAppLockerByPassList |
1993 |
364 |
PowerShell |
8 |
The goal of this repository is to document the most common techniques to bypass AppLocker. |
2023-09-11T20:43:25Z |
| 76 |
PoshC2 |
1952 |
343 |
PowerShell |
23 |
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement. |
2025-06-21T10:47:18Z |
| 77 |
Sherlock |
1948 |
424 |
PowerShell |
2 |
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. |
2018-10-10T09:10:45Z |
| 78 |
Extras |
1902 |
1474 |
PowerShell |
598 |
📦 The Extras bucket for Scoop. |
2025-06-24T02:16:39Z |
| 79 |
DomainPasswordSpray |
1895 |
395 |
PowerShell |
12 |
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS! |
2024-07-11T18:18:57Z |
| 80 |
Windows-Super-God-Mode |
1888 |
133 |
PowerShell |
3 |
Creates shortcuts to virtually every special location or action built into Windows |
2024-09-14T17:58:07Z |
| 81 |
Microsoft365DSC |
1862 |
561 |
PowerShell |
291 |
Manages, configures, extracts and monitors Microsoft 365 tenant configurations |
2025-06-20T14:27:49Z |
| 82 |
windows-dev-box-setup-scripts |
1856 |
401 |
PowerShell |
28 |
Scripts to simplify setting up a Windows developer box |
2024-02-02T23:15:52Z |
| 83 |
Virtualization-Documentation |
1856 |
1544 |
PowerShell |
0 |
Place to store our documentation, code samples, etc for public consumption. |
2025-06-19T17:31:50Z |
| 84 |
bloatbox |
1846 |
113 |
PowerShell |
20 |
☑️🌠 Remove Bloatwares from Windows 10 |
2024-02-07T12:38:48Z |
| 85 |
mimikittenz |
1846 |
334 |
PowerShell |
7 |
A post-exploitation powershell tool for extracting juicy info from memory. |
2024-06-28T11:10:03Z |
| 86 |
A1111-Web-UI-Installer |
1821 |
210 |
PowerShell |
0 |
Complete installer for Automatic1111’s infamous Stable Diffusion WebUI |
2023-08-22T00:30:52Z |
| 87 |
Enterprise-Scale |
1819 |
1020 |
PowerShell |
93 |
The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture |
2025-06-22T05:05:48Z |
| 88 |
Microsoft-Defender-for-Cloud |
1812 |
813 |
PowerShell |
21 |
Welcome to the Microsoft Defender for Cloud community repository |
2025-06-20T21:50:33Z |
| 89 |
JAWS |
1791 |
312 |
PowerShell |
1 |
JAWS - Just Another Windows (Enum) Script |
2021-04-19T14:53:29Z |
| 90 |
PSKoans |
1778 |
178 |
PowerShell |
39 |
A simple, fun, and interactive way to learn the PowerShell language through Pester unit testing. |
2024-09-03T22:08:21Z |
| 91 |
windowsterminal-shell |
1715 |
150 |
PowerShell |
15 |
Install/uninstall scripts for Windows Terminal context menu items |
2024-05-08T01:41:44Z |
| 92 |
Main |
1705 |
1049 |
PowerShell |
97 |
📦 The default bucket for Scoop. |
2025-06-24T00:41:18Z |
| 93 |
Security-Datasets |
1655 |
244 |
PowerShell |
7 |
Re-play Security Events |
2024-03-20T20:19:19Z |
| 94 |
packer-windows |
1640 |
1120 |
PowerShell |
35 |
Windows Packer Templates |
2019-08-05T14:35:46Z |
| 95 |
Kansa |
1607 |
273 |
PowerShell |
42 |
A Powershell incident response framework |
2022-11-22T02:14:29Z |
| 96 |
Invoke-TheHash |
1605 |
309 |
PowerShell |
5 |
PowerShell Pass The Hash Utils |
2018-12-09T15:38:36Z |
| 97 |
winfetch |
1603 |
89 |
PowerShell |
15 |
🛠 A command-line system information utility written in PowerShell. Like Neofetch, but for Windows. |
2024-05-09T04:53:04Z |
| 98 |
PowerSharpPack |
1597 |
310 |
PowerShell |
1 |
None |
2025-04-14T13:31:01Z |
| 99 |
psake |
1578 |
272 |
PowerShell |
24 |
A build automation tool written in PowerShell |
2025-03-09T14:53:49Z |
| 100 |
Azure-Red-Team |
1570 |
212 |
PowerShell |
0 |
Azure Security Resources and Notes |
2024-06-12T14:00:59Z |