Complete Mandiant Offensive VM (Commando VM), a fully customizable Windows-based pentesting virtual machine distribution. commandovm@mandiant.com

Some scripts useful for red team activities

NetRipper - Smart traffic sniffing for penetration testers

Monkey365 provides a tool for security consultants to easily conduct not only Microsoft 365, but also Azure subscriptions and Microsoft Entra ID security configuration reviews.

A Cloud Forensics Powershell module to run threat hunting playbooks on data from Azure and O365

retrieve information via O365 and AzureAD with a valid cred

Powershell-based Windows Security Auditing Toolbox

PowerMeta searches for publicly available files hosted on various websites for a particular domain by using specially crafted Google, and Bing searches. It then allows for the download of those fil…

Powershell script to do domain auditing automation

HoneyPoC: Proof-of-Concept (PoC) script to exploit SIGRed (CVE-2020-1350). Achieves Domain Admin on Domain Controllers running Windows Server 2000 up to Windows Server 2019.

LogRM is a post exploitation powershell script which it uses windows event logs to gather information about internal network

A series of PowerShell scripts to automate collection of forensic artefacts in most Incident Response environments