admin/nettitude-PoshC2
1
0
Fork 0
mirror of https://github.com/nettitude/PoshC2 synced 2026-06-08 16:22:47 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
AmsiShellcode
nettitude-PoshC2/resources/modules
T
History
Ben Turner efb4c98956 Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop
2025-06-21 11:47:17 +01:00
..
OFs
v9 release WIP
2023-03-20 10:39:32 +00:00
PEs
v8.0 release
2022-03-10 10:23:35 +00:00
Brute-AD.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Brute-LocAdmin.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Bypass-UAC.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Certify.exe
Updates
2024-11-23 14:02:50 +00:00
clipboard_monitor.js
Initial JXA Implant
2021-04-09 15:17:30 +01:00
clipboard.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
ConvertTo-Shellcode.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
cred-popper.js
Initial JXA Implant
2021-04-09 15:17:30 +01:00
Cred-Popper.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
CSharp-OracleClient.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
CVE-2016-9192.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Daisy.dll
v9 release WIP
2023-03-20 10:39:32 +00:00
dcom.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Decrypt-RDCMan.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
DNSResolve.exe
v8.0 release
2022-03-10 10:23:35 +00:00
Dump-NTDS.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Echo.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
EventLogSearcher.exe
v8.0 release
2022-03-10 10:23:35 +00:00
Exploit-EternalBlue.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
FComm.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
FileGrep.exe
v8.0 release
2022-03-10 10:23:35 +00:00
Get-ComputerInfo.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-CreditCardData.ps1
Update Get-CreditCardData.ps1
2020-08-19 22:08:49 +01:00
Get-FirewallRules.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-GPPAutologon.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-GPPPassword.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Get-Hash.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-IdleTime.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-InjectedThread.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-InjectedThreads.ps1
Updates
2024-11-23 14:02:50 +00:00
Get-IPConfig.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Get-Keystrokes.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-LAPSPasswords.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-LocAdm.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Get-MSHotFixes.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-Netstat.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-PassNotExp.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-PassPol.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Get-ProcessList.ps1
Added Default Payloads
2023-06-28 10:55:23 +01:00
Get-RecentFiles.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Get-ServicePerms.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-System.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Get-TokenElevationType.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-UserInfo.ps1
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
Get-UserLogons.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Get-WLANPass.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
GetCreds.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
GetInstallerInfo.exe
v8.0 release
2022-03-10 10:23:35 +00:00
HealthInspector.js
Initial JXA Implant
2021-04-09 15:17:30 +01:00
HostEnum.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
IncidentReponseToolkit.ps1
Updates
2024-11-23 14:02:50 +00:00
IncidentResponseToolkit.exe
Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop
2025-06-21 11:47:17 +01:00
Inject-Shellcode.ps1
reset PS shellcode default back to netsh.exe
2024-04-15 08:51:04 +01:00
InternalMonologue.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Inveigh-Relay.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Inveigh.exe
Create BackGround Tasks
2020-07-30 09:06:50 +01:00
Inveigh.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-Arpscan.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-DaisyChain.ps1
Update Daisying & Add Get-InjectedThread
2020-07-30 09:06:50 +01:00
Invoke-DCSync.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-EDRChecker.ps1
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
Invoke-EventVwrBypass.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-Hostscan.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-InveighUnprivileged.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-Kerberoast.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-Mimikatz.ps1
v8.0 release
2022-03-10 10:23:35 +00:00
Invoke-MS16-032-Proxy.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-MS16-032.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-Pbind.ps1
Fix an infinite loop in the PBind client (#107)
2020-07-30 09:06:50 +01:00
Invoke-Pipekat.ps1
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
Invoke-Portscan.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-PowerDump.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-PsExec.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-PSInject.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-PsUACme.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-ReflectivePEInjection.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-ReverseDnsLookup.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-RunAs.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-Sharp.ps1
Added Invoke-Sharp
2024-09-02 16:57:58 +01:00
Invoke-Shellcode.ps1
Updated invoke-shellcode
2024-09-02 16:57:58 +01:00
Invoke-SMBClient.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-SMBExec.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-Sniffer.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-SqlQuery.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-Tater.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-TheHash.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-TokenManipulation.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-URLCheck.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-WinRMSession.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-WMIChecker.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-WMICommand.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-WMIEvent.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Invoke-WMIExec.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Invoke-WScriptBypassUAC.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
IPConfigCS.exe
v8.0 release
2022-03-10 10:23:35 +00:00
KeePassConfig.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
KeeThief.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
linuxprivchecker.py
v9 release WIP
2023-03-20 10:39:32 +00:00
LockLess.exe
Add LockLess for copying and extracting locked files
2020-08-05 15:48:07 +01:00
LoggedOnUsers.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
Logger.exe
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
MiniDump.ps1
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
NamedPipe.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
NamedPipeDaisy.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
NamedPipeProxy.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Net-GPPPassword.exe
v8.0 release
2022-03-10 10:23:35 +00:00
New-JScriptShell.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Orchard.js
Initial JXA Implant
2021-04-09 15:17:30 +01:00
Out-Minidump.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
PassTheCert.exe
Updates
2024-11-23 14:02:50 +00:00
PBind.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
PGrabber.dll
v9 release WIP
2023-03-20 10:39:32 +00:00
PingCS.exe
v8.0 release
2022-03-10 10:23:35 +00:00
PortScanner.dll
Added PortScanner from @rbmaslen
2020-04-15 10:19:14 +01:00
PortScanner.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
powercat.ps1
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
Powermad.ps1
Create Powermad.ps1 (#98)
2020-04-15 10:19:14 +01:00
PowerUp.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
PowerUpSQL_Full.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
PowerUpSQL.ps1
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
PowerView_dev.ps1
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
powerview.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
PrivescCheck.ps1
v8.0 release
2022-03-10 10:23:35 +00:00
PS.exe
Net-share-enum-full and updates for KCT
2024-11-29 08:37:47 +00:00
PwrStatusTracker.dll
v9 release WIP
2023-03-20 10:39:32 +00:00
RegSave.exe
v8.0 release
2022-03-10 10:23:35 +00:00
Rubeus.exe
Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop
2025-06-21 11:47:17 +01:00
RunAs-NetOnly.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
RunAs.exe
Added RunAs and updated Microsoft Keys for Installer
2020-04-04 13:34:03 +01:00
RunasCs.exe
Added Runas commands for C# Implant and PS execution
2020-04-06 08:29:26 +01:00
RunOF-Debug.exe
v8.0 release
2022-03-10 10:23:35 +00:00
RunOF.exe
v8.0 release
2022-03-10 10:23:35 +00:00
RunPE-Debug.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
RunPE.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SafetyDump.exe
Fix and Update SafetyDump & integration
2020-12-01 14:40:06 +00:00
SafetyKatz.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SchTasks.exe
Fixed get-multi-screenshot bug
2024-09-02 16:57:58 +01:00
Screenshot-AllWindows.ps1
Updated get-screenshot & get-screenshot-allwindows PS command handler
2024-09-02 16:57:58 +01:00
Screenshot.dll
Added screenshot.dll for get-screenshotallwindows
2020-07-30 09:06:50 +01:00
Screenshot.ps1
Updated get-screenshot & get-screenshot-allwindows PS command handler
2024-09-02 16:57:58 +01:00
Seatbelt.exe
v8.0 release
2022-03-10 10:23:35 +00:00
Seatbelt.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Service-Perms.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
Set-LHSTokenPrivilege.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
SExec.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SharpApplocker.exe
Add SharpAddLocker from https://github.com/Flangvik/SharpAppLocker/
2020-08-06 11:35:17 +01:00
SharpChrome.exe
Updated Sharp payloads to add AmsiBypass and added new Stage2-Core.exe
2020-04-15 10:19:14 +01:00
SharpChromium.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SharpCOM.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpCookieMonster.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SharpCreateProc.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SharpDPAPI.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SharpDump.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpEdge.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpEDRChecker.exe
SharpEDRChecker Update
2020-08-19 18:00:32 +01:00
SharPersist.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpFTP.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SharpHound.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SharpHound.ps1
v9 release WIP
2023-03-20 10:39:32 +00:00
SharpLogger.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpPrinter.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpPrintNightmare.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SharpProcessList.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SharpReg.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SharpRoast.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpSC2.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SharpSC.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpService.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SharpShadowCopy.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SharpShares.exe
Net-share-enum-full and updates for KCT
2024-11-29 08:37:47 +00:00
SharpSniper.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpSocksImplant.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SharpSploit.dll
Updated Mimikatz, Rubeus and Added Certify
2021-08-09 10:06:31 +01:00
SharpSSDP.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpTask.exe
Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop
2025-06-21 11:47:17 +01:00
SharpTelnet.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SharpUp.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpView.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpWeb.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
SharpWMI.exe
Update modules, change encoding, adjust some to use Write-Output instead of Write-Host etc.
2020-04-15 10:19:14 +01:00
SharpWSUS.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
Sherlock.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Shhmon.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Sitrep.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
SQLQuery.exe
Fixed get-multi-screenshot bug
2024-09-02 16:57:58 +01:00
SSLInspectionCheck.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
Stage2-Core.exe
Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop
2025-06-21 11:47:17 +01:00
Stage2-Core.ps1
Added Missing Hosted File & Mimi Help & ETW
2024-09-02 16:57:58 +01:00
StandIn.exe
Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop
2025-06-21 11:47:17 +01:00
Steal_token.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
StickyNotesExtract.exe
v8.0 release
2022-03-10 10:23:35 +00:00
SweetPotato.exe
Added incident-response-toolkit, updated core modules and minor fixes to help and core and PBind multi-hop
2025-06-21 11:47:17 +01:00
SwiftBelt.js
Initial JXA Implant
2021-04-09 15:17:30 +01:00
SyscallsExtractor.exe
v8.0 release
2022-03-10 10:23:35 +00:00
Test-ADCredential.ps1
Fixed modules to UTF-8 not UTF-8 BOM
2021-01-06 14:48:56 +00:00
TestProxy.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
token.exe
v9 release WIP
2023-03-20 10:39:32 +00:00
Unhooker.ps1
v9 release WIP
2023-03-20 10:39:32 +00:00
Watson.exe
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00
WExec.exe
v8.0 release
2022-03-10 10:23:35 +00:00
Zippy.ps1
Refactor PoshC2's internals
2020-01-03 20:48:53 +00:00