Search results for "PowerShell"

• 

  Malware

  Lyceum Hackers Stealing Credentials Windows By Deploy Keylogger Using PowerShell Scripts & .NET RAT

  The Lyceum threat group (aka Hexane) again initiated an attack, but this time they have a weird variant of a remote-access trojan...

• 

  259

  Ransomware

  Ryuk Ransomware Operators Employ Powershell Commands to Deploy Ransomware

  Recently, cybersecurity experts have claimed that the operators of Ryuk Ransomware are targeting severe infrastructures to extort high ransom from their victims....

• 

  2.6K

  Hackers Repository

  WindowsFirewallRuleset: Windows firewall ruleset powershell scripts

  Windows Firewall Ruleset Windows firewall rules organized into individual powershell scripts according to: Rule group Traffic direction IP version (IPv4 / IPv6)...

• 

  4.9K

  Hack Tools

  ThreatHunt: PowerShell repository to train your threat hunting skills

  ThreatHunt is a simple PowerShell repository that allows you to train your threat hunting skills. ThreatHunt allows you to simulate a variety...

• 

  739

  Hack Tools

  MaliciousMacroMSBuild: Generates Malicious Macro and Execute Powershell or Shellcode

  Malicious Macro MSBuild Generator Generates Malicious Macro and Execute Powershell or Shellcode via MSBuild Application Whitelisting Bypass, this tool intended for adversary...

• 

  4.8K

  Hack Tools

  Adaudit – Powershell Script To Do Domain Auditing Automation

  PowerShell Script to perform a quick AD audit _____ ____ _____ _ _ _| _ | | _ |_ _ _| |_|...

• 

  138

  Hacking Tools

  Powershell-RAT | A Backdoor Tool to Extract Data via Gmail

  Powershell-RAT is a Python and Powershell script tool that has been made to help a pen tester during red team engagements to backdoor...

• 

  128

  Evasion & Obfuscation

  Invisi-Shell: Bypass all Powershell security features

  Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking...

• 

  97

  Post Exploitation

  PoshC2 – Powershell C2 Server and Implants

  Many tools are written in PowerShell especially for red team activities as the majority of modern Windows are having PowerShell and usually...

• 

  64

  Malware

  A dive into Turla PowerShell usage

  ESET researchers analyze new TTPs attributed to the Turla group that leverage PowerShell to run malware in-memory only

• 

  95

  Hack Tools

  Red Team Powershell Scripts

  Various PowerShell scripts that may be useful during a red team exercise. The repo includes the following scripts: Red Team Powershell Scripts...

• 

  72

  Malware

  Hackers Abuse Windows Installer MSI to Execute Malicious JavaScript, VBScript, PowerShell Scripts to Drop Malware

  Hackers use malicious MSI files that download and execute malicious files that could bypass traditional security solutions. The dropped malware is capable...

• 

  97

  Information Gathering

  DCOMrade – Powershell Script For Enumerating Vulnerable DCOM Applications

    DCOMrade is a Powershell script that is able to enumerate the possible vulnerable DCOM applications that might allow for lateral movement,...

• 

  69

  Remote Administration Tools

  ThunderShell – Python / PowerShell based RAT

  ThunderShell is a C# RAT that communicates via HTTP requests. All the network traffic is encrypted using a second layer of RC4...

• 

  79

  Malware

  Hackers Distributing PowerShell-based Backdoor Via MS Office document That Shares Stolen Data Via C&C Sever

  Researchers observed a new Powershell based backdoor via Microsoft office document that infects similar to MuddyWater threat actor hacking tools to steal...

• 

  78

  Exploitation Tools

  Invisi-Shell – Hide Your Powershell Script In Plain Sight (Bypass All Powershell Security Features)

  Hide your powershell script in plain sight! Invisi-Shell bypasses all of Powershell security features (ScriptBlock logging, Module logging, Transcription, AMSI) by hooking...

• 

  75

  Security Tools

  ADModule – Microsoft Signed ActiveDirectory PowerShell Module

  Microsoft signed DLL for the ActiveDirectory PowerShell module Just a backup for the Microsoft’s ActiveDirectory PowerShell module from Server 2016 with RSAT...

• 

  60

  Hack Tools

  DbgShell – PowerShell Front-End for Windows Debugger Engine

  The main impetus for DbgShell is that it’s just waaaay too hard to automate anything in the debugger. There are facilities today to assist...

• 

  77

  Remote Administration Tools

  Powershell-RAT – Gmail Exfiltration RAT

  Powershell-RAT is a Python-based Gmail exfiltration RAT that can be used a Windows backdoor to send screenshots or other data as an...

• 

  83

  Exploitation Tools

  LNK-Kisser – PowerShell Link Payload Generator

  Making FUD Shortcut (.lnk) payloads with LNK-KISSER to remote execute malicious code.   Shortcut-Payload-Generator Exploiting Powershell to make ShortCut Payloads [fud]. There...

• 

  72

  Malware

  MuddyWater Malware Attack Launch PowerShell Script to Open Backdoor in Windows PC via MS Word Document

  Newly detected MuddyWater Malware campaign open the sophisticated backdoor in Windows PC by launching Powershell script using weaponized Microsoft word document. Initially, MuddyWater...