| 1 |
winutil |
38958 |
2093 |
PowerShell |
192 |
Chris Titus Tech’s Windows Utility - Install Programs, Tweaks, Fixes, and Updates |
2025-08-09T15:33:50Z |
| 2 |
Win11Debloat |
25036 |
1042 |
PowerShell |
34 |
A simple, easy to use PowerShell script to remove pre-installed apps, disable telemetry, as well as perform various other changes to customize, declutter and improve your Windows experience. Win11Debloat works for both Windows 10 and Windows 11. |
2025-08-16T00:17:52Z |
| 3 |
Scoop |
22749 |
1476 |
PowerShell |
314 |
A command-line installer for Windows. |
2025-08-14T09:51:19Z |
| 4 |
core |
21559 |
4924 |
PowerShell |
327 |
.NET news, announcements, release notes, and more! |
2025-08-13T22:13:04Z |
| 5 |
Windows10Debloater |
18610 |
2076 |
PowerShell |
284 |
Script to remove Windows 10 bloatware. |
2023-03-10T04:15:01Z |
| 6 |
SpotX |
17873 |
920 |
PowerShell |
6 |
SpotX patcher used for patching the desktop version of Spotify |
2025-08-14T18:35:56Z |
| 7 |
Atlas |
16524 |
593 |
PowerShell |
4 |
🚀 An open and lightweight modification to Windows, designed to optimize performance, privacy and usability. |
2025-08-16T00:49:52Z |
| 8 |
tiny11builder |
12560 |
1015 |
PowerShell |
149 |
Scripts to build a trimmed-down Windows 11 image. |
2024-11-17T19:45:03Z |
| 9 |
PowerSploit |
12533 |
4704 |
PowerShell |
67 |
PowerSploit - A PowerShell Post-Exploitation Framework |
2020-08-17T23:19:49Z |
| 10 |
Office-Tool |
11715 |
962 |
PowerShell |
0 |
Office Tool Plus localization projects. |
2025-08-16T14:40:44Z |
| 11 |
runner-images |
11704 |
3444 |
PowerShell |
32 |
GitHub Actions runner images |
2025-08-15T14:09:19Z |
| 12 |
BloodHound-Legacy |
10297 |
1782 |
PowerShell |
75 |
Six Degrees of Domain Admin |
2025-08-01T14:34:03Z |
| 13 |
winget-pkgs |
9619 |
5312 |
PowerShell |
1000 |
The Microsoft community Windows Package Manager manifest repository |
2025-08-17T18:39:36Z |
| 14 |
nishang |
9400 |
2520 |
PowerShell |
16 |
Nishang - Offensive PowerShell for red team, penetration testing and offensive security. |
2024-04-25T19:39:44Z |
| 15 |
blazor |
9321 |
645 |
PowerShell |
0 |
Blazor moved to https://github.com/dotnet/aspnetcore |
2021-02-23T15:13:56Z |
| 16 |
Sophia-Script-for-Windows |
8540 |
610 |
PowerShell |
0 |
:zap: The most powerful PowerShell module for fine-tuning Windows |
2025-08-15T18:05:12Z |
| 17 |
posh-git |
8027 |
819 |
PowerShell |
87 |
A PowerShell environment for Git |
2024-09-02T15:03:06Z |
| 18 |
Empire |
7679 |
2900 |
PowerShell |
64 |
Empire is a PowerShell and Python post-exploitation agent. |
2020-01-19T22:50:59Z |
| 19 |
flare-vm |
7599 |
1019 |
PowerShell |
18 |
A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on a VM. |
2025-08-13T16:58:28Z |
| 20 |
commando-vm |
7316 |
1329 |
PowerShell |
7 |
Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com |
2024-09-24T19:14:18Z |
| 21 |
docker |
7126 |
4660 |
PowerShell |
17 |
Docker official jenkins repo |
2025-08-18T03:08:46Z |
| 22 |
GOAD |
6742 |
945 |
PowerShell |
95 |
game of active directory |
2025-07-16T16:54:53Z |
| 23 |
Win-Debloat-Tools |
6211 |
301 |
PowerShell |
23 |
Re-imagining Windows like a minimal OS install, already debloated with minimal impact for most functionality. |
2025-06-14T13:39:47Z |
| 24 |
Debloat-Windows-10 |
6193 |
832 |
PowerShell |
33 |
A Collection of Scripts Which Disable / Remove Windows 10 Features and Apps |
2024-11-04T18:26:57Z |
| 25 |
Flipper-Zero-BadUSB |
6128 |
774 |
PowerShell |
52 |
Repository for my flipper zero badUSB payloads. Now almost entirely plug and play. |
2024-06-15T09:43:09Z |
| 26 |
windows-defender-remover |
6059 |
401 |
PowerShell |
33 |
A tool which is uses to remove Windows Defender in Windows 8.x, Windows 10 (every version) and Windows 11. |
2025-06-06T18:19:17Z |
| 27 |
K8tools |
6042 |
2072 |
PowerShell |
5 |
K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix) |
2025-01-25T06:32:52Z |
| 28 |
awesome-powershell |
5221 |
434 |
PowerShell |
5 |
This repository has been moved to https://codeberg.org/janikvonrotz/awesome-powershell. Please visit the new location for the latest updates. |
2025-04-14T06:25:33Z |
| 29 |
oh-my-posh2 |
5203 |
286 |
PowerShell |
0 |
A prompt theming engine for Powershell |
2021-02-16T07:48:59Z |
| 30 |
UnattendedWinstall |
5070 |
520 |
PowerShell |
62 |
Personalized Unattended Answer Files that helps automatically debloat and customize Windows 10 & 11 during the installation process. |
2024-12-05T11:39:14Z |
| 31 |
k8s-for-docker-desktop |
5035 |
1124 |
PowerShell |
34 |
为Docker Desktop for Mac/Windows开启Kubernetes和Istio。 |
2025-03-07T07:13:27Z |
| 32 |
Easy-GPU-PV |
5033 |
510 |
PowerShell |
243 |
A Project dedicated to making GPU Partitioning on Windows easier! |
2024-06-22T08:22:34Z |
| 33 |
usbrubberducky-payloads |
5024 |
1530 |
PowerShell |
11 |
The Official USB Rubber Ducky Payload Repository |
2025-08-16T22:49:51Z |
| 34 |
Win10-Initial-Setup-Script |
4694 |
1073 |
PowerShell |
30 |
PowerShell script for automation of routine tasks done after fresh installations of Windows 10 / Server 2016 / Server 2019 |
2021-05-28T08:15:14Z |
| 35 |
machinelearning-samples |
4633 |
2703 |
PowerShell |
159 |
Samples for ML.NET, an open source and cross-platform machine learning framework for .NET. |
2024-07-27T09:39:50Z |
| 36 |
RedTeaming-Tactics-and-Techniques |
4349 |
1098 |
PowerShell |
9 |
Red Teaming Tactics and Techniques |
2024-08-22T07:17:31Z |
| 37 |
Invoke-Obfuscation |
4054 |
796 |
PowerShell |
11 |
PowerShell Obfuscator |
2023-08-10T23:49:06Z |
| 38 |
WinPwn |
3546 |
542 |
PowerShell |
2 |
Automation for internal Windows Penetrationtest / AD-Security |
2024-11-26T07:50:22Z |
| 39 |
win10script |
3513 |
1044 |
PowerShell |
0 |
This is the Ultimate Windows 10 Script from a creation from multiple debloat scripts and gists from github. |
2022-06-24T03:57:47Z |
| 40 |
svg-explorer-extension |
3462 |
200 |
PowerShell |
48 |
Extension module for Windows Explorer to render SVG thumbnails, so that you can have an overview of your SVG files |
2020-06-01T14:47:56Z |
| 41 |
PrivescCheck |
3412 |
484 |
PowerShell |
0 |
Privilege Escalation Enumeration Script for Windows |
2025-06-28T11:05:24Z |
| 42 |
OSCP |
3367 |
708 |
PowerShell |
0 |
OSCP Cheat Sheet |
2025-07-25T05:35:19Z |
| 43 |
Pester |
3209 |
478 |
PowerShell |
152 |
Pester is the ubiquitous test and mock framework for PowerShell. |
2025-07-30T07:16:23Z |
| 44 |
MailSniper |
3114 |
587 |
PowerShell |
21 |
MailSniper is a penetration testing tool for searching through email in a Microsoft Exchange environment for specific terms (passwords, insider intel, network architecture information, etc.). It can be used as a non-administrative user to search their own email, or by an administrator to search the mailboxes of every user in a domain. |
2025-08-07T01:58:13Z |
| 45 |
Thanos.sh |
2968 |
290 |
PowerShell |
46 |
if you are Thanos(root), this command could delete half your files randomly |
2022-06-27T09:16:53Z |
| 46 |
sysmon-modular |
2845 |
629 |
PowerShell |
30 |
A repository of sysmon configuration modules |
2024-08-21T12:08:06Z |
| 47 |
PowerShell |
2836 |
496 |
PowerShell |
1 |
500+ free PowerShell scripts (.ps1) for Linux, Mac OS, and Windows. |
2025-08-17T15:37:39Z |
| 48 |
bashbunny-payloads |
2803 |
1474 |
PowerShell |
22 |
The Official Bash Bunny Payload Repository |
2025-02-16T21:56:37Z |
| 49 |
chocolatey |
2800 |
337 |
PowerShell |
138 |
[DEPRECATED - https://github.com/chocolatey/choco] Chocolatey NuGet - Like apt-get, but for windows. |
2017-03-03T15:02:50Z |
| 50 |
Penetration-Testing-Tools |
2763 |
536 |
PowerShell |
3 |
A collection of more than 170+ tools, scripts, cheatsheets and other loots that I’ve developed over years for Red Teaming/Pentesting/IT Security audits purposes. |
2023-06-27T19:16:49Z |
| 51 |
PowerShell |
2753 |
731 |
PowerShell |
10 |
PowerShell functions and scripts (Azure, Active Directory, SCCM, SCSM, Exchange, O365, …) |
2024-06-12T21:55:16Z |
| 52 |
Terminal-Icons |
2724 |
121 |
PowerShell |
50 |
A PowerShell module to show file and folder icons in the terminal |
2024-08-06T15:47:02Z |
| 53 |
PowerShell-Suite |
2686 |
770 |
PowerShell |
7 |
My musings with PowerShell |
2021-11-19T12:18:24Z |
| 54 |
PowerUpSQL |
2624 |
481 |
PowerShell |
21 |
PowerUpSQL: A PowerShell Toolkit for Attacking SQL Server |
2024-12-12T18:09:39Z |
| 55 |
dbatools |
2623 |
838 |
PowerShell |
267 |
🚀 SQL Server automation and instance migrations have never been safer, faster or freer |
2025-08-17T16:21:07Z |
| 56 |
Fido |
2617 |
241 |
PowerShell |
1 |
A PowerShell script to download Windows or UEFI Shell ISOs |
2025-06-12T16:42:44Z |
| 57 |
ImportExcel |
2615 |
418 |
PowerShell |
5 |
PowerShell module to import/export Excel spreadsheets, without Excel |
2025-04-23T12:16:05Z |
| 58 |
Active-Directory-Exploitation-Cheat-Sheet |
2614 |
518 |
PowerShell |
1 |
A cheat sheet that contains common enumeration and attack methods for Windows Active Directory. |
2025-07-06T22:33:16Z |
| 59 |
windows_hardening |
2513 |
329 |
PowerShell |
8 |
HardeningKitty and Windows Hardening Settings |
2025-08-10T15:41:00Z |
| 60 |
sRDI |
2355 |
480 |
PowerShell |
10 |
Shellcode implementation of Reflective DLL Injection. Convert DLLs to position independent shellcode |
2023-11-15T10:53:00Z |
| 61 |
AzureAD-Attack-Defense |
2333 |
344 |
PowerShell |
8 |
This publication is a collection of various common attack scenarios on Microsoft Entra ID (formerly known as Azure Active Directory) and how they can be mitigated or detected. |
2025-04-24T05:39:33Z |
| 62 |
DeepBlueCLI |
2318 |
370 |
PowerShell |
7 |
None |
2023-10-14T17:06:57Z |
| 63 |
powercat |
2277 |
488 |
PowerShell |
9 |
netshell features all in version 2 powershell |
2024-03-05T18:05:07Z |
| 64 |
ScubaGear |
2273 |
307 |
PowerShell |
188 |
Automation to assess the state of your M365 tenant against CISA’s baselines |
2025-08-17T02:25:24Z |
| 65 |
PowerShell-Docs |
2236 |
1640 |
PowerShell |
30 |
The official PowerShell documentation sources |
2025-08-15T22:04:25Z |
| 66 |
MicroBurst |
2228 |
331 |
PowerShell |
4 |
A collection of scripts for assessing Microsoft Azure security |
2025-07-23T21:00:52Z |
| 67 |
PowerRemoteDesktop |
2220 |
257 |
PowerShell |
9 |
Remote Desktop entirely coded in PowerShell. |
2024-08-01T14:19:19Z |
| 68 |
Invoke-PSImage |
2188 |
399 |
PowerShell |
5 |
Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute |
2019-09-23T15:17:03Z |
| 69 |
vulnerable-AD |
2174 |
423 |
PowerShell |
9 |
Create a vulnerable active directory that’s allowing you to test most of the active directory attacks in a local lab |
2024-04-12T18:06:21Z |
| 70 |
BadBlood |
2168 |
287 |
PowerShell |
5 |
BadBlood by @davidprowe, Secframe.com, fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an understanding and prescribe to securing Active Directory. Each time this tool runs, it produces different results. The domain, users, groups, computers and permissions are different. Every. Single. Time. |
2023-06-07T17:14:17Z |
| 71 |
PowerTools |
2136 |
823 |
PowerShell |
4 |
PowerTools is a collection of PowerShell projects with a focus on offensive operations. |
2021-12-28T21:00:42Z |
| 72 |
AutomatedLab |
2121 |
382 |
PowerShell |
28 |
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2022, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc. |
2025-08-13T15:41:58Z |
| 73 |
Fast-Kubernetes |
2028 |
601 |
PowerShell |
0 |
This repo covers Kubernetes with LABs: Kubectl, Pod, Deployment, Service, PV, PVC, Rollout, Multicontainer, Daemonset, Taint-Toleration, Job, Ingress, Kubeadm, Helm, etc. |
2025-04-14T08:54:11Z |
| 74 |
UltimateAppLockerByPassList |
2010 |
366 |
PowerShell |
8 |
The goal of this repository is to document the most common techniques to bypass AppLocker. |
2023-09-11T20:43:25Z |
| 75 |
PersistenceSniper |
2010 |
203 |
PowerShell |
4 |
Powershell module that can be used by Blue Teams, Incident Responders and System Administrators to hunt persistences implanted in Windows machines. Official Twitter/X account @PersistSniper. Made with ❤️ by @last0x00 and @dottor_morte |
2024-12-11T16:45:04Z |
| 76 |
PoshC2 |
1999 |
350 |
PowerShell |
23 |
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement. |
2025-06-21T10:47:18Z |
| 77 |
Sherlock |
1956 |
420 |
PowerShell |
2 |
PowerShell script to quickly find missing software patches for local privilege escalation vulnerabilities. |
2018-10-10T09:10:45Z |
| 78 |
Extras |
1939 |
1500 |
PowerShell |
611 |
📦 The Extras bucket for Scoop. |
2025-08-18T00:44:43Z |
| 79 |
Microsoft365DSC |
1935 |
586 |
PowerShell |
219 |
Manages, configures, extracts and monitors Microsoft 365 tenant configurations |
2025-08-08T17:42:16Z |
| 80 |
DomainPasswordSpray |
1924 |
398 |
PowerShell |
12 |
DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will automatically generate the userlist from the domain. BE VERY CAREFUL NOT TO LOCKOUT ACCOUNTS! |
2024-07-11T18:18:57Z |
| 81 |
Windows-Super-God-Mode |
1922 |
140 |
PowerShell |
3 |
Creates shortcuts to virtually every special location or action built into Windows |
2024-09-14T17:58:07Z |
| 82 |
Virtualization-Documentation |
1865 |
1538 |
PowerShell |
0 |
Place to store our documentation, code samples, etc for public consumption. |
2025-08-14T17:31:43Z |
| 83 |
windows-dev-box-setup-scripts |
1861 |
400 |
PowerShell |
28 |
Scripts to simplify setting up a Windows developer box |
2024-02-02T23:15:52Z |
| 84 |
bloatbox |
1860 |
114 |
PowerShell |
20 |
☑️🌠 Remove Bloatwares from Windows 10 |
2024-02-07T12:38:48Z |
| 85 |
mimikittenz |
1855 |
333 |
PowerShell |
7 |
A post-exploitation powershell tool for extracting juicy info from memory. |
2024-06-28T11:10:03Z |
| 86 |
Enterprise-Scale |
1842 |
1028 |
PowerShell |
102 |
The Azure Landing Zones (Enterprise-Scale) architecture provides prescriptive guidance coupled with Azure best practices, and it follows design principles across the critical design areas for organizations to define their Azure architecture |
2025-08-17T05:05:50Z |
| 87 |
JAWS |
1828 |
317 |
PowerShell |
1 |
JAWS - Just Another Windows (Enum) Script |
2021-04-19T14:53:29Z |
| 88 |
Microsoft-Defender-for-Cloud |
1825 |
820 |
PowerShell |
25 |
Welcome to the Microsoft Defender for Cloud community repository |
2025-07-30T14:57:42Z |
| 89 |
A1111-Web-UI-Installer |
1819 |
207 |
PowerShell |
0 |
Complete installer for Automatic1111’s infamous Stable Diffusion WebUI |
2023-08-22T00:30:52Z |
| 90 |
PSKoans |
1794 |
177 |
PowerShell |
39 |
A simple, fun, and interactive way to learn the PowerShell language through Pester unit testing. |
2024-09-03T22:08:21Z |
| 91 |
windowsterminal-shell |
1726 |
153 |
PowerShell |
15 |
Install/uninstall scripts for Windows Terminal context menu items |
2024-05-08T01:41:44Z |
| 92 |
Main |
1722 |
1071 |
PowerShell |
96 |
📦 The default bucket for Scoop. |
2025-08-18T00:44:56Z |
| 93 |
Security-Datasets |
1669 |
247 |
PowerShell |
7 |
Re-play Security Events |
2024-03-20T20:19:19Z |
| 94 |
winfetch |
1645 |
90 |
PowerShell |
15 |
🛠 A command-line system information utility written in PowerShell. Like Neofetch, but for Windows. |
2024-05-09T04:53:04Z |
| 95 |
packer-windows |
1642 |
1119 |
PowerShell |
35 |
Windows Packer Templates |
2019-08-05T14:35:46Z |
| 96 |
Invoke-TheHash |
1636 |
308 |
PowerShell |
5 |
PowerShell Pass The Hash Utils |
2018-12-09T15:38:36Z |
| 97 |
PowerSharpPack |
1611 |
311 |
PowerShell |
1 |
None |
2025-04-14T13:31:01Z |
| 98 |
Kansa |
1609 |
274 |
PowerShell |
42 |
A Powershell incident response framework |
2022-11-22T02:14:29Z |
| 99 |
Winget-AutoUpdate |
1604 |
165 |
PowerShell |
19 |
WAU daily updates apps as system and notify connected users. (Allowlist and Blocklist support) |
2025-08-13T00:11:52Z |
| 100 |
Azure-Red-Team |
1594 |
214 |
PowerShell |
0 |
Azure Security Resources and Notes |
2025-07-07T10:06:42Z |