Tools: windows (148)

Tiny free proxy server.

Active Directory Assessment and Privilege Escalation Script.

winPEAS, but for Active Directory.

A gadget finder and a ROP-Chainer tool for x86 platforms.

Analyze digital signature of PE file.

A tool capable of detect and stop attacks of Ransomware using honeypots.

This is an archive of various @Stake tools that help perform vulnerability scanning and analysis, information gathering,

A remote administration system which allows a user to control a computer across a tcpip connection using a simple consol

Retrieves the browse list ; the output list contains computer names, and the roles they play in the network.

A tool designed for auditing the cryptography container security in PKCS12 format.

One of the fastest, most flexible remote password crackers you can get your hands on.

A tool that demonstrates how to recover cache entry information: username and hashed password (called MSCASH).

Active Directory Certificate Services enumeration and abuse.

Chrome web browser decoder tool that demonstrates recovering passwords.

A Google chrome forensics tool.

Password spraying in AD environment avoing account locking.

NetExec & CrackMapExec module that execute PingCastle on a remote machine.

Dark-Dork Searcher.

Store and execute an encrypted windows binary from inside memory, without a single bit touching disk.

.NET deobfuscator and unpacker.

.NET deobfuscator and unpacker.

Detect directory traversal vulnerabilities in HTTP servers and web applications.

.NET debugger and assembly editor.

Dumping revelant information on compromised targets without AV detection with DPAPI.

Free .NET Decompiler and Assembly Browser.

Dumps NTs ACLs and audit settings.

Dumps account names and information even though RestrictAnonymous has been set to 1.

Windows tool which allows you to completely remove sensitive data from your hard drive by overwriting it several times w

Can change the Ethernet address of the network adapters in Windows.

Floods a switched network with Ethernet frames with random hardware addresses.

Script to automatically extract the bitlocker recovery keys from a domain.

A binary file fuzzer for Windows with several options.

Python script allowing to quickly find uncommon shares in vast Windows Domains.

Identify unknown open ports and their associated applications.

Cross-platform M$ registry hive editor.

An XML driven fuzz testing framework that emphasizes easy extensibility and reusability.

Signature Engine for Windows Event Logs.

Compiled Binaries for Ghostpack (.NET v4.8.1).

Lists information about the applied Group Policies.

GPOs manipulation tool.

Performs traffic redirection by sending spoofed ARP replies.

Gives you the Discretionary Access Control List of any Windows NT service you specify as a command line option.

Google Talk decoder tool that demonstrates recovering passwords from accounts.

An small application designed to analyze your system searching for global objects related to running process and display

Python framework project designed to enumerate and help in Active Directory attacks through Windows protocols like SMB,

Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, sh

A hook tool which can be potentially helpful in reversing applications and analyzing malware. It can hook to an API in a

A slow HTTP denial-of-service tool that works similarly to other attacks, but rather than leveraging request headers or

Tool for web server fingerprinting, also known as http fingerprinting.

A web server fingerprinting tool (Windows binaries).

A runtime encrypter for 32-bit and 64-bit portable executables.

Determine vulnerabilities in the PSK implementation of the VPN server.

A next generation sniffer including a lot of features: capturing passwords/hashes, sniffing chat messages, performing ma

This is a tool that lists processes in your Windows system and the ports each one listen on.

A sugared version of RottenPotatoNG, with a bit of juice.

The decompilation engine of JustDecompile.

A little toolbox to play with Microsoft Kerberos in C.

Kerberos sniffer and cracker for Windows.

A keystroke logger for the NT-series of Windows.

Monitor creation, deletion and changes to LDAP objects live during your pentest or system administration!

Lateral Movement technique using DCOM and HTA.

Living Off The Land Binaries And Scripts - (LOLBins and LOLScripts).

A freeware tool to perform static and dynamic analysis on malware.

Queries the master browser for whatever information it has registered.

Performs a memory dump using NtSystemDebugControl.

A network reconnaissance tool designed to facilitate large address space,high speed node discovery and identification.

Aid operators in modifying ADCS certificate templates so that a created vulnerable state can be leveraged for privilege

Help red teamers to stay hidden by clearing evidence of execution.

Microsoft SQL Relay is an offensive tool for auditing and abusing Microsoft SQL (MSSQL) services.

Bypass Windows' authentication via binary patching.

Decodes and displays all NetBIOS name packets it receives on UDP port 137 and more!

A utility for Windows that can be used to enumerate NetBIOS information from one host or a range of hosts.

NetBus remote administration tool

NetExec & CrackMapExec module that execute PingCastle on a remote machine.

Smart traffic sniffing for penetration testers.

Well-known wireless AP scanner and sniffer.

Native WinRM shell client with NTLM, Kerberos, file transfers, in-memory operations, and multi-session support.

Unique collection of small and useful freeware utilities.

This application dumps LM and NTLM hashes from active accounts stored in an Active Directory database.

This tool can crack passwords which are encrypted using Oracle's latest SHA1 based password protection algorithm.

A small tool that implements part of the functionality of the Microsoft tool signtool.exe.

A demonstration tool that employs several techniques to detect sandboxes and analysis environments in the same way as ma

A freeware reversing tool for PE files.

Scans a given process. Recognizes and dumps a variety of potentially malicious implants (replaced/injected PEs, shellcod

A PE file inspection tool.

Portable executable (PE) manipulation toolkit.

A forensics tool that can extract all files from an executable file created by a joiner or similar.

An whitebox fuzz testing tool capable of detected several classes of vulnerabilities in PHP web applications.

Active Directory scanning tool.

Passively discover, scan, and fingerprint link-local peers by the background noise they generate (i.e. their broadcast a

A tool that lets you dump the memory contents of a process to a file without stopping the process.

Deliver powershell payloads via DNS TXT via CloudFlare using PowerShell.

Run PowerShell command without invoking powershell.exe.

PowerShell Runspace Portable Post Exploitation Tool aimed at making Penetration Testing with PowerShell "easier".

Run PowerShell with rundll32. Bypass software restrictions.

A Professional PE file Explorer for reversers, malware researchers and those who want to statically inspect PE files in

Query for existence of pre-windows 2000 computer objects which can be leveraged to gain a foothold in a target domain.

Checks if your network adapter(s) is running in promiscuous mode, which may be a sign that you have a sniffer running on

Lists the contents of the Protected Storage.

Extracts the binary SAM and SYSTEM file from the filesystem and then the hashes.

Gathers information about the Active Directory and generates a report which can provide a holistic picture of the curren

RCE via GPO scheduled tasks.

Python library to parse and read Microsoft minidump file format.

Kerberos manipulation library in pure Python.

A forensic tool which grabs as much information as possible from a Windows system.

A small program which lists the information for all of the entries in any phonebook file (.pbk).

Windows registry forensic analysis tool.

Open raw Windows NT 5 Registry files (Windows 2000 or higher).

Resource compiler and decompiler for Windows® applications.

Azure AD and O365 exploration framework.

Azure AD and O365 exploration framework.

Azure AD and O365 exploration framework.

Azure AD and O365 exploration framework.

A collection of tools that can be useful for doing attacks on routing protocols.

Sniffs WINDOWS RPC messages in a given RPC server process.

Contains three separate tools for obtaining information from a system that is running RPC services

Identifying, profiling, and attacking SCCM related assets in an Active Directory domain.

Allows you to set file ownership to any account, as long as you have the "Restore files and directories" user right.

A modular C2 framework designed to successfully operate on mature environments.

A tool that search in your HD to find which publishers has been signed binaries in your PC.

A sip scanner.

This is a tool that demonstrates dumping MD5 password hashes from the configuration file in Skype.

SMB / HTTP to SMB replay attack toolkit.

Turn back the asterisks in password fields to plaintext passwords.

A native code to C/C++ decompiler, see the examples of generated code.

A Windows based SNMP detection utility that can quickly and accurately identify SNMP enabled devices on a network.

A general-purpose Internet utility package, with some extra features to help in tracing the source of spam and other for

SQL Server scanning tool that also checks for weak passwords using wordlists.

Application created in .Net 1.1 that helps the penetration tester to find and exploit SQL injections on a web page.

Searches for Alternate Data Streams (ADS).

A remote administration tool. No further comments ;-)

Powerful TCP port scanner, pinger, resolver.

Sysinternals tools suite.

Kerberoast with ACL abuse capabilities.

Defeating Windows User Account Control.

Bruteforces network login masks.

UPnP Pentest Toolkit for Windows.

A utility for Windows that captures wifi traffic on the channel you choose, using Microsoft Network Monitor capture driv

A user-mode packet capture-and-divert package for Windows.

Block spying and tracking on Windows.

Uses null sessions to remotely try to retrieve lists of and information about user accounts, workstation/interdomain/ser

Hex Editor and Disk Editor.

Automation for internal Windows Penetrationtest / AD-Security.

A TCP/UDP forwarder/redirector that works with both IPv4 and IPv6.

A simple ping sweeper, that is, it pings a range of IP addresses and lists the ones that reply.

An UDP port scanner for Windows.

A general network vulnerabilities scanner for scanning network vulnerabilities for specific IP address scope or stand-al

An open-source x64/x32 debugger for windows.