Fix-Log4j-PowershellScript

Fix-Log4j-PowershellScript CVE-2021-44228 search and remove JNDI Lookup Class from log4j.jar files on the system with Powershell Windows make sure you use the latest script release! Release version 1.6.2 and above Killmode for Java processes implemented. $killMode defaults to $false if not change...

CVE-2021-3438

What is included? CVE-2021-3438detection v2sccm.ps1 is a script to run via sccm to get a small report on the vulnerability of managed devices. CVE-2021-3438detection.ps1 is a script to run manually or remote on a managed device. CVE-2021-3438remediation.ps1 is a script to check and run the...

PS2

PS2 A port scanner written purely in PowerShell. Disclaimer This tool was designed for legal purposes only; users are responsible for ensuring that their use of this tool complies with all appliable laws. By using this tool, you take full responsibility for any actions you perform. Neither NCC...

PowerShell-Suite

PowerShell-Suite There are great tools and resources online to accomplish most any task in PowerShell, sometimes however, there is a need to script together a util for a specific purpose or to bridge an ontological gap. This is a collection of PowerShell utilities I put together either for fun or...

CcmMessagingBackdoor

CcmMessagingBackdoor Proof of Concept tooling to build and install a rogue CcmMessaging service to maintain access on a Management Point Usage Compile and install the rogue COM service on the Management Point Compile PS C:\ C:\Windows\Microsoft.NET\Framework64\v2.0.50727\csc.exe /t:library...

AMSI-Bypass

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the safe return of all citizens who have been taken hostage by the terrorist group Hamas. We will not rest until every hostage is released and returns home safely. You can help bring them back home.https://stories.bringthemhomenow.net/ AMSI Write Raid...

ditto

ditto Powershell Obfuscator Ditto is a Powershell and JavaScript obfuscator base on tree-sitter-powershell and tree-sitter-javascript. Command Line Usage Basic Command Structure ditto-cli options CLI Arguments & Options Short Option| Long Option| Description ---|---|--- -h| --help| Display help...

CVE-2024-38063-Remediation

CVE-2024-38063-Remediation Audit script Download script using powershell one-liner $downloadURI = 'https://raw.githubusercontent.com/dweger-scripts/CVE-2024-38063-Remediation/main/Audit-PatchInstalled-ipv6Vuln.ps1'; $script = 'C:\temp\Audit-PatchInstalled-ipv6Vuln.ps1'; Invoke-WebRequest -URI...

Search-log4Jvuln-AppScanSTD

Search log4J vuln using AppScan Standard and a list of websites This Powershell script run AppScan Standard scans against a list of web sites URLs.txt checking just for Log4J CVE-2021-44228 vulnerability. Structure of project: After run the script, it will read each line in URLs.txt and start...

CVE-2025-59287-WSUS

CVE-2025-59287-WSUS powershell version of hawktrace POC exploit https://hawktrace.com/blog/CVE-2025-59287-UNAUTH 1: edit the variables in the script url, port, etc 2: start netcat listener 3: run script - it will auto download ysoserial.net, generate the payload and send exploit to WSUS server th...

KSK-ITDK-CVE-2026-21509-Mitigation

CVE-2026-21509-Mitigation Powershell script with Detection and Remediation for CVE-2026-21509...

iberyanbytes

Iberyanbytes AD enumeration tool, which allows taking information that is related to the network and gathering information about network interfaces, IP configuration, DNS, and routing tables. It enumerates network shares and analyses share permissions, gathers details about installed software,...

PS-CVE-2021-44228

PS-CVE-2021-44228 Static detection of vulnerable log4j librairies on Windows members of an AD domain. Uses detection tool binary provided by @1lann : https://github.com/1lann/log4shelldetect Prerequisites Administrator privileges on targeted computers. Active Directory PowerShell module...

Invoke-sAMSpoofing

Invoke-sAMSpoofing CVE-2021-42287/CVE-2021-42278 exploits in powershell Table of content Overview Menu Screenshots References Overview A simple script to attack AD with CVE-2021-42287/CVE-2021-42278 exploits automatically. Menu Invoke-sAMSpooofing Invoke-GoldenTicket Invoke-GoldenTips...

calebstewart-CVE-2021-1675

CVE-2021-1675 - PrintNightmare LPE PowerShell Caleb Stewart | John Hammond | July 1, 2021 CVE-2021-1675 is a critical remote code execution and local privilege escalation vulnerability dubbed "PrintNightmare." Proof-of-concept exploits have been released Python, C++ for the remote code execution...

WSUSResponder

🧰 WSUSResponder Version: 1.0.1 Author: RZA / IT Operations License:MIT 🎯 Objective The WSUSResponder module provides a set of PowerShell tools to quickly respond to the critical vulnerability CVE-2025-59287 , a remote code execution RCE flaw affecting Windows Server Update Services WSUS. It allow...

Dropper-GCleaner-C2-Infrastructure-Kernel-Driver-PowerShell-Conhost-Payload-Analysis

1. C2 Infrastructure – Resilient & Redundant Servers Process Hacker memory analysis reveals a comprehensive list of domains used by Dropper GCleaner for C2 communication. These domains are hosted on various platforms Scaleway, Render, Replit, etc., indicating a robust and redundant infrastructure...

secure-boot-cert-servicing

Secure Boot Certificate Rollover — assessment and servicing A single, self-contained PowerShell script that assesses a Windows machine's Secure Boot certificate posture for the 2011 → 2023 rollover CVE-2023-24932 / KB5025885 and, only when you explicitly ask it to, opts that machine in to the...

Hijack-service-binaries

Hijack-service-binaries A PowerShell security auditing tool that identifies Windows service binaries that can be modified by the current user—a potential privilege escalation vector. Overview This script scans all Windows services except system32 and svchost and checks if the current user has...

nessus-vulnerability-scanning-lab

Nessus Vulnerability Scanning Lab — Azure Full vulnerability management lifecycle — scan, find, fix, verify — executed against my live Azure Active Directory lab environment using a dedicated, Terraform-deployed Nessus scanner. What This Lab Demonstrates I deployed a dedicated Ubuntu 24.04 scanne...