| 1 |
winutil |
43839 |
2330 |
PowerShell |
269 |
Chris Titus Tech’s Windows Utility - Install Programs, Tweaks, Fixes, and Updates |
2025-12-12T15:00:52Z |
| 2 |
Win11Debloat |
34923 |
1362 |
PowerShell |
35 |
A simple, lightweight PowerShell script to remove pre-installed apps, disable telemetry, as well as perform various other changes to customize, declutter and improve your Windows experience. Win11Debloat works for both Windows 10 and Windows 11. |
2025-12-13T00:15:41Z |
| 3 |
cmder |
26682 |
2084 |
PowerShell |
54 |
Lovely console emulator package for Windows |
2025-12-08T21:22:53Z |
| 4 |
Scoop |
23275 |
1487 |
PowerShell |
361 |
A command-line installer for Windows. |
2025-11-26T15:29:20Z |
| 5 |
core |
21804 |
4951 |
PowerShell |
321 |
.NET news, announcements, release notes, and more! |
2025-12-12T23:09:03Z |
| 6 |
SpotX |
18967 |
977 |
PowerShell |
3 |
SpotX patcher used for patching the desktop version of Spotify |
2025-12-04T19:51:24Z |
| 7 |
Windows10Debloater |
18706 |
2078 |
PowerShell |
284 |
Script to remove Windows 10 bloatware. |
2023-03-10T04:15:01Z |
| 8 |
tiny11builder |
16911 |
1310 |
PowerShell |
75 |
Scripts to build a trimmed-down Windows 11 image. |
2025-09-12T07:23:23Z |
| 9 |
PowerSploit |
12747 |
4719 |
PowerShell |
67 |
PowerSploit - A PowerShell Post-Exploitation Framework |
2020-08-17T23:19:49Z |
| 10 |
Office-Tool |
12348 |
992 |
PowerShell |
0 |
Office Tool Plus localization projects. |
2025-12-10T13:35:54Z |
| 11 |
runner-images |
12227 |
3619 |
PowerShell |
47 |
GitHub Actions runner images |
2025-12-12T20:03:34Z |
| 12 |
BloodHound-Legacy |
10465 |
1790 |
PowerShell |
75 |
Six Degrees of Domain Admin |
2025-08-01T14:34:03Z |
| 13 |
winget-pkgs |
10006 |
5734 |
PowerShell |
1084 |
The Microsoft community Windows Package Manager manifest repository |
2025-12-13T03:10:48Z |
| 14 |
nishang |
9620 |
2544 |
PowerShell |
16 |
Nishang - Offensive PowerShell for red team, penetration testing and offensive security. |
2024-04-25T19:39:44Z |
| 15 |
blazor |
9319 |
644 |
PowerShell |
0 |
Blazor moved to https://github.com/dotnet/aspnetcore |
2021-02-23T15:13:56Z |
| 16 |
Sophia-Script-for-Windows |
8780 |
612 |
PowerShell |
2 |
:zap: The most powerful PowerShell module for fine-tuning Windows |
2025-12-12T21:54:56Z |
| 17 |
posh-git |
8111 |
822 |
PowerShell |
90 |
A PowerShell environment for Git |
2024-09-02T15:03:06Z |
| 18 |
flare-vm |
8098 |
1050 |
PowerShell |
19 |
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM. |
2025-09-17T05:09:30Z |
| 19 |
Empire |
7750 |
2919 |
PowerShell |
64 |
Empire is a PowerShell and Python post-exploitation agent. |
2020-01-19T22:50:59Z |
| 20 |
commando-vm |
7429 |
1336 |
PowerShell |
6 |
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com |
2025-10-16T04:00:43Z |
| 21 |
docker |
7271 |
4696 |
PowerShell |
12 |
Docker official jenkins repo |
2025-12-10T13:07:09Z |
| 22 |
GOAD |
7220 |
1008 |
PowerShell |
104 |
game of active directory |
2025-07-16T16:54:53Z |
| 23 |
windows-defender-remover |
6703 |
442 |
PowerShell |
40 |
A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11. |
2025-06-06T18:19:17Z |
| 24 |
Flipper-Zero-BadUSB |
6415 |
817 |
PowerShell |
53 |
Repository for my flipper zero badUSB payloads. Now almost entirely plug and play. |
2024-06-15T09:43:09Z |
| 25 |
Win-Debloat-Tools |
6357 |
313 |
PowerShell |
24 |
Re-imagining Windows like a minimal OS install, already debloated with minimal impact for most functionality. |
2025-10-03T17:41:05Z |
| 26 |
Debloat-Windows-10 |
6173 |
821 |
PowerShell |
33 |
A Collection of Scripts Which Disable / Remove Windows 10 Features and Apps |
2025-09-23T16:52:21Z |
| 27 |
K8tools |
6124 |
2078 |
PowerShell |
5 |
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix) |
2025-01-25T06:32:52Z |
| 28 |
usbrubberducky-payloads |
5347 |
1580 |
PowerShell |
12 |
The Official USB Rubber Ducky Payload Repository |
2025-12-03T22:44:36Z |
| 29 |
awesome-powershell |
5294 |
440 |
PowerShell |
5 |
This repository has been moved to https://codeberg.org/janikvonrotz/awesome-powershell. Please visit the new location for the latest updates. |
2025-04-14T06:25:33Z |
| 30 |
Easy-GPU-PV |
5242 |
526 |
PowerShell |
250 |
A Project dedicated to making GPU Partitioning on Windows easier! |
2025-10-06T21:52:37Z |
| 31 |
oh-my-posh2 |
5204 |
286 |
PowerShell |
0 |
A prompt theming engine for Powershell |
2021-02-16T07:48:59Z |
| 32 |
k8s-for-docker-desktop |
5061 |
1124 |
PowerShell |
34 |
为Docker Desktop for Mac/Windows开启Kubernetes和Istio。 |
2025-03-07T07:13:27Z |
| 33 |
Win10-Initial-Setup-Script |
4680 |
1067 |
PowerShell |
30 |
PowerShell script for automation of routine tasks done after fresh installations of Windows 10 / Server 2016 / Server 2019 |
2021-05-28T08:15:14Z |
| 34 |
machinelearning-samples |
4659 |
2704 |
PowerShell |
160 |
Samples for ML.NET, an open source and cross-platform machine learning framework for .NET. |
2024-07-27T09:39:50Z |
| 35 |
RedTeaming-Tactics-and-Techniques |
4447 |
1118 |
PowerShell |
9 |
Red Teaming Tactics and Techniques |
2024-08-22T07:17:31Z |
| 36 |
Invoke-Obfuscation |
4158 |
806 |
PowerShell |
11 |
PowerShell Obfuscator |
2023-08-10T23:49:06Z |
| 37 |
WinPwn |
3610 |
546 |
PowerShell |
2 |
Automation for internal Windows Penetrationtest / AD-Security |
2025-08-28T13:07:26Z |
| 38 |
PrivescCheck |
3589 |
493 |
PowerShell |
5 |
Privilege Escalation Enumeration Script for Windows |
2025-11-19T14:08:22Z |
| 39 |
OSCP |
3564 |
743 |
PowerShell |
0 |
OSCP Cheat Sheet |
2025-12-07T12:39:55Z |
| 40 |
svg-explorer-extension |
3541 |
202 |
PowerShell |
49 |
Extension module for Windows Explorer to render SVG thumbnails, so that you can have an overview of your SVG files |
2020-06-01T14:47:56Z |
| 41 |
win10script |
3510 |
1038 |
PowerShell |
0 |
This is the Ultimate Windows 10 Script from a creation from multiple debloat scripts and gists from github. |
2022-06-24T03:57:47Z |
| 42 |
RemoveWindowsAI |
3338 |
109 |
PowerShell |
2 |
Force Remove Copilot, Recall and More in Windows 11 |
2025-12-12T22:11:22Z |
| 43 |
Pester |
3239 |
477 |
PowerShell |
162 |
Pester is the ubiquitous test and mock framework for PowerShell. |
2025-09-23T12:37:13Z |
| 44 |
MailSniper |
3162 |
601 |
PowerShell |
21 |
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain. |
2025-08-07T01:58:13Z |
| 45 |
PowerShell |
2975 |
526 |
PowerShell |
1 |
500+ free PowerShell scripts (.ps1) for Linux, macOS, and Windows. |
2025-12-11T12:34:26Z |
| 46 |
Thanos.sh |
2971 |
287 |
PowerShell |
46 |
if you are Thanos(root), this command could delete half your files randomly |
2022-06-27T09:16:53Z |
| 47 |
sysmon-modular |
2935 |
644 |
PowerShell |
31 |
A repository of sysmon configuration modules |
2024-08-21T12:08:06Z |
| 48 |
Penetration-Testing-Tools |
2855 |
541 |
PowerShell |
3 |
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I’ve developed over years for Red Teaming/Pentesting/IT Security audits purposes. |
2023-06-27T19:16:49Z |
| 49 |
bashbunny-payloads |
2841 |
1489 |
PowerShell |
22 |
The Official Bash Bunny Payload Repository |
2025-12-03T23:02:29Z |
| 50 |
chocolatey |
2800 |
335 |
PowerShell |
138 |
[DEPRECATED - https://github.com/chocolatey/choco] Chocolatey NuGet - Like apt-get, but for windows. |
2017-03-03T15:02:50Z |
| 51 |
PowerShell |
2797 |
743 |
PowerShell |
10 |
PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, …) |
2024-06-12T21:55:16Z |
| 52 |
Terminal-Icons |
2783 |
124 |
PowerShell |
51 |
A PowerShell module to show file and folder icons in the terminal |
2024-08-06T15:47:02Z |
| 53 |
Fido |
2719 |
246 |
PowerShell |
1 |
A PowerShell script to download Windows or UEFI Shell ISOs |
2025-11-21T21:36:01Z |
| 54 |
PowerShell-Suite |
2702 |
765 |
PowerShell |
7 |
My musings with PowerShell |
2021-11-19T12:18:24Z |
| 55 |
Fast-Kubernetes |
2691 |
863 |
PowerShell |
1 |
This repo covers Kubernetes with LABs: Kubectl, Pod, Deployment, Service, PV, PVC, Rollout, Multicontainer, Daemonset, Taint-Toleration, Job, Ingress, Kubeadm, Helm, etc. |
2025-04-14T08:54:11Z |
| 56 |
dbatools |
2688 |
854 |
PowerShell |
159 |
🚀 SQL Server automation and instance migrations have never been safer, faster or freer |
2025-12-05T13:24:06Z |
| 57 |
Active-Directory-Exploitation-Cheat-Sheet |
2675 |
522 |
PowerShell |
1 |
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. |
2025-07-06T22:33:16Z |
| 58 |
ImportExcel |
2661 |
421 |
PowerShell |
6 |
PowerShell module to import/export Excel spreadsheets, without Excel |
2025-10-07T16:09:55Z |
| 59 |
PowerUpSQL |
2656 |
477 |
PowerShell |
21 |
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server |
2024-12-12T18:09:39Z |
| 60 |
windows_hardening |
2566 |
329 |
PowerShell |
9 |
HardeningKitty and Windows Hardening Settings |
2025-12-03T16:21:31Z |
| 61 |
sRDI |
2463 |
493 |
PowerShell |
11 |
Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode |
2023-11-15T10:53:00Z |
| 62 |
AzureAD-Attack-Defense |
2435 |
353 |
PowerShell |
8 |
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected. |
2025-11-08T08:55:53Z |
| 63 |
ScubaGear |
2379 |
332 |
PowerShell |
181 |
Automation to assess the state of your M365 tenant against CISA’s baselines |
2025-12-12T20:22:09Z |
| 64 |
DeepBlueCLI |
2362 |
374 |
PowerShell |
7 |
None |
2023-10-14T17:06:57Z |
| 65 |
PowerShell-Docs |
2329 |
1676 |
PowerShell |
21 |
The official PowerShell documentation sources |
2025-12-10T23:04:23Z |
| 66 |
powercat |
2322 |
493 |
PowerShell |
9 |
netshell features all in version 2 powershell |
2024-03-05T18:05:07Z |
| 67 |
MicroBurst |
2288 |
337 |
PowerShell |
4 |
A collection of scripts for assessing Microsoft Azure security |
2025-10-29T22:53:42Z |
| 68 |
vulnerable-AD |
2234 |
433 |
PowerShell |
9 |
Create a vulnerable active directory that’s allowing you to test most of the active directory attacks in a local lab |
2024-04-12T18:06:21Z |
| 69 |
PowerRemoteDesktop |
2232 |
260 |
PowerShell |
9 |
Remote Desktop entirely coded in PowerShell. |
2024-08-01T14:19:19Z |
| 70 |
BadBlood |
2203 |
290 |
PowerShell |
5 |
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time. |
2023-06-07T17:14:17Z |
| 71 |
Invoke-PSImage |
2192 |
394 |
PowerShell |
5 |
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute |
2019-09-23T15:17:03Z |
| 72 |
PowerTools |
2169 |
821 |
PowerShell |
4 |
PowerTools is a collection of PowerShell projects with a focus on offensive operations. |
2021-12-28T21:00:42Z |
| 73 |
AutomatedLab |
2153 |
377 |
PowerShell |
21 |
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc. |
2025-11-10T12:51:26Z |
| 74 |
Microsoft365DSC |
2103 |
620 |
PowerShell |
171 |
Manages, configures, extracts and monitors Microsoft 365 tenant configurations |
2025-12-11T14:45:29Z |
| 75 |
PoshC2 |
2061 |
356 |
PowerShell |
23 |
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement. |
2025-11-20T13:55:21Z |
| 76 |
PersistenceSniper |
2041 |
211 |
PowerShell |
4 |
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte |
2024-12-11T16:45:04Z |
| 77 |
UltimateAppLockerByPassList |
2033 |
365 |
PowerShell |
8 |
The goal of this repository is to document the most common techniques to bypass AppLocker. |
2023-09-11T20:43:25Z |
| 78 |
Extras |
1998 |
1550 |
PowerShell |
610 |
📦 The Extras bucket for Scoop. |
2025-12-13T00:40:27Z |
| 79 |
Windows-Super-God-Mode |
1996 |
143 |
PowerShell |
3 |
Creates shortcuts to virtually every special location or action built into Windows |
2024-09-14T17:58:07Z |
| 80 |
DomainPasswordSpray |
1981 |
407 |
PowerShell |
13 |
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS! |
2024-07-11T18:18:57Z |
| 81 |
Sherlock |
1968 |
417 |
PowerShell |
2 |
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. |
2018-10-10T09:10:45Z |
| 82 |
JAWS |
1898 |
324 |
PowerShell |
1 |
JAWS - Just Another Windows (Enum) Script |
2021-04-19T14:53:29Z |
| 83 |
Enterprise-Scale |
1898 |
1050 |
PowerShell |
103 |
The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture |
2025-12-11T10:12:55Z |
| 84 |
Virtualization-Documentation |
1886 |
1531 |
PowerShell |
0 |
Place to store our documentation, code samples, etc for public consumption. |
2025-11-28T18:33:15Z |
| 85 |
mimikittenz |
1864 |
334 |
PowerShell |
7 |
A post-exploitation powershell tool for extracting juicy info from memory. |
2024-06-28T11:10:03Z |
| 86 |
windows-dev-box-setup-scripts |
1863 |
395 |
PowerShell |
29 |
Scripts to simplify setting up a Windows developer box |
2024-02-02T23:15:52Z |
| 87 |
bloatbox |
1863 |
111 |
PowerShell |
20 |
☑️🌠 Remove Bloatwares from Windows 10 |
2024-02-07T12:38:48Z |
| 88 |
Microsoft-Defender-for-Cloud |
1856 |
836 |
PowerShell |
29 |
Welcome to the Microsoft Defender for Cloud community repository |
2025-12-08T14:45:32Z |
| 89 |
PSKoans |
1821 |
179 |
PowerShell |
39 |
A simple, fun, and interactive way to learn the PowerShell language through Pester unit testing. |
2024-09-03T22:08:21Z |
| 90 |
A1111-Web-UI-Installer |
1816 |
205 |
PowerShell |
0 |
Complete installer for Automatic1111’s infamous Stable Diffusion WebUI |
2023-08-22T00:30:52Z |
| 91 |
Main |
1767 |
1083 |
PowerShell |
122 |
📦 The default bucket for Scoop. |
2025-12-13T00:42:20Z |
| 92 |
IntuneManagement |
1765 |
330 |
PowerShell |
63 |
Copy, export, import, delete, document and compare policies and profiles in Intune and Azure with PowerShell script and WPF UI. Import ADMX files and registry settings with ADMX ingestion. View and edit PowerShell script. |
2025-12-07T10:23:06Z |
| 93 |
windowsterminal-shell |
1740 |
153 |
PowerShell |
15 |
Install/uninstall scripts for Windows Terminal context menu items |
2024-05-08T01:41:44Z |
| 94 |
Winget-AutoUpdate |
1716 |
178 |
PowerShell |
24 |
WAU daily updates apps as system and notify connected users. (Allowlist and Blocklist support) |
2025-12-08T06:03:51Z |
| 95 |
winfetch |
1704 |
90 |
PowerShell |
16 |
🛠 A command-line system information utility written in PowerShell. Like Neofetch, but for Windows. |
2024-05-09T04:53:04Z |
| 96 |
Security-Datasets |
1704 |
253 |
PowerShell |
7 |
Re-play Security Events |
2024-03-20T20:19:19Z |
| 97 |
badusb |
1699 |
249 |
PowerShell |
0 |
Flipper Zero badusb payload library |
2025-12-05T23:11:25Z |
| 98 |
Invoke-TheHash |
1687 |
309 |
PowerShell |
5 |
PowerShell Pass The Hash Utils |
2018-12-09T15:38:36Z |
| 99 |
HardeningKitty |
1680 |
206 |
PowerShell |
8 |
HardeningKitty - Checks and hardens your Windows configuration |
2024-12-23T10:32:27Z |
| 100 |
Azure-Red-Team |
1667 |
221 |
PowerShell |
0 |
Azure Security Resources and Notes |
2025-11-07T10:33:10Z |