Awesome GitHub RepositoriesPowerShell

The Windows Package Manager is a command line tool for discovering, installing, upgrading, and configuring software packages on Windows operating systems. It functions as a CLI software installer for automating the deployment and update of applications across individual or machine-wide user profiles. The project extends its functionality through a component object model interface for integration into other Windows applications and a set of native cmdlets that allow system administrators to manage software installation via PowerShell scripts. The tool covers a broad range of package lifecycle

Scoop is a command-line package manager for Windows designed to automate the installation, configuration, and lifecycle management of software. It utilizes a manifest-driven architecture where applications are defined in structured text files, allowing for consistent and repeatable deployments. By leveraging shim-based path management and symlink-based version switching, it enables users to install and toggle between multiple software versions without cluttering the global system environment. The project distinguishes itself through its focus on portability and clean system integration. It su

This project provides a framework for managing multi-agent systems, designed to automate complex software development, infrastructure, and business workflows. It functions as a multi-agent workflow orchestrator that routes tasks to domain-specific workers while maintaining state persistence and infrastructure automation. By leveraging large language models, the system decomposes high-level objectives into actionable plans, ensuring that complex operations are executed with consistency and reliability. The framework distinguishes itself through its hierarchical agent registry and policy-driven

Atlas is an operating system customization framework designed to deploy streamlined versions of Windows. It functions as a performance optimization tool that establishes a baseline environment by removing pre-installed software, unnecessary background services, and resource-heavy processes. The project distinguishes itself through a comprehensive suite of automation and configuration tools that modify low-level system registry keys and group policies. These mechanisms allow users to enforce performance-oriented hardware settings, restrict telemetry and data collection, and manage the lifecycl

Windows10Debloater is a PowerShell-based utility designed to automate the removal of pre-installed software and the modification of system settings on Windows operating systems. It functions as a configuration manager that streamlines the desktop environment by uninstalling bundled applications and adjusting background services to reduce resource consumption. The tool distinguishes itself by providing a centralized orchestration layer for system hardening and privacy management. It allows users to restrict diagnostic data collection and block telemetry services, effectively limiting backgroun

This project is a JavaScript code protection tool designed to transform source code into a version that is difficult for humans to read. Its primary purpose is to protect intellectual property and prevent reverse engineering by altering the original program logic. The tool employs several advanced techniques to hinder analysis, including control flow flattening and the injection of dead code. It can compile functions into custom bytecode executed by an embedded virtual machine and encrypt string literals to prevent static analysis of text. Additional capabilities include anti-debugging mecha

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a

This project is a post-exploitation framework and command and control platform designed for security research and penetration testing. It functions as a remote access tool consisting of a central command server and encrypted executable payloads that establish reverse shell connections. The system utilizes a web-based dashboard for multi-client administration, allowing for remote host monitoring and direct shell access through an in-browser terminal. It generates cross-platform, encrypted binaries that employ a multi-stage delivery chain and a key exchange mechanism to secure communications.

This project is a suite of Windows system optimization scripts and tools designed for debloating, environment configuration, and network optimization. It provides a set of scripts to modify registry settings, disable telemetry, and remove preinstalled software to improve privacy, stability, and overall performance. The tool features a graphical interface that allows users to select and customize system function profiles to generate and execute optimization scripts. It distinguishes itself by automating the deployment of essential C++ and .NET runtimes and simplifying the installation of the W

LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

Universal Ctags is a multi-language symbol indexer and regex-based parsing engine used to extract and catalog functions, classes, and variables from source code. It functions as a source code indexer that scans files across diverse programming languages to create searchable catalogs of definitions and declarations. The project is distinguished by its extensible parser framework, which allows users to define new language rules using regular expressions and configuration files. It supports complex parsing scenarios through state-based parsing, stack-oriented scope tracking, and guest-parser del

This project is a cross-platform dotfiles collection and shell configuration framework designed to standardize development environments across Unix and Windows. It provides a set of version-controlled configuration files and environment settings for text editors, terminal multiplexers, and interactive command line interfaces. The collection functions as a symlink configuration manager, linking settings to the home directory to maintain synchronization across multiple machines. It includes a productivity framework for terminal workflow optimization, incorporating tools for fuzzy finding, direc

K8tools is a multi-stage attack framework that combines memory-only payload execution, credential testing, port forwarding, privilege escalation, and physical USB-based keystroke injection for comprehensive system compromise. At its core, the Ladon PowerShell module loads a multi-function scanner directly into memory, enabling command execution without writing files to disk, while supporting memory-only payload delivery that downloads and runs obfuscated shellcode or PowerShell commands to evade antivirus detection. The framework distinguishes itself through its breadth of integrated capabili

هذا المشروع عبارة عن مجموعة من سكربتات الأتمتة والأدوات المصممة لتحسين Windows 10. يعمل كسكربت لإزالة البرامج غير الضرورية (debloat) وأداة تكوين تُستخدم لإزالة التطبيقات المثبتة مسبقاً وتعطيل الميزات المدمجة لتحسين أداء النظام. توفر الأداة آلية لتعديل إعدادات النظام وتقليل حمل خدمات الخلفية. تؤتمت إزالة البرامج غير المرغوب فيها وتعطيل الوظائف غير الأساسية لتقليل استخدام الموارد واستعادة موارد النظام. يغطي المشروع توفير النظام وضبط الأداء من خلال تعديلات السجل، وتعطيل الميزات القائم على السياسة، وتثبيت مكونات البرامج الأساسية. يستخدم أتمتة PowerShell وإزالة المكونات القائمة على WMI لتنفيذ هذه التكوينات.

how2 is a terminal-based tool that translates plain-English questions into shell commands using AI and StackOverflow data. It functions as a command-line interface where users describe what they want to do in natural language, and the tool returns the appropriate Unix shell or PowerShell command, with support for generating multi-line Bash scripts from natural language prompts. The tool distinguishes itself through its interactive answer browsing mode, which lets users select and copy from multiple StackOverflow answers directly in the terminal. It includes a fallback search mechanism that qu

Easy-GPU-PV هي مجموعة أدوات إدارية للتحقق من توافق الأجهزة وأتمتة نشر تسريع الرسومات المقسمة عبر بيئات Windows الافتراضية. تعمل كمنسق ومدير للموارد لتوفير الأجهزة الافتراضية بوحدات معالجة رسومات مقسمة. يركز المشروع على تقسيم GPU في Windows، مما يتيح لبطاقة رسومات فعلية واحدة مشاركة تسريع الأجهزة عبر أنظمة افتراضية متعددة. يحقق ذلك من خلال أتمتة تكوين أجهزة وبرامج المضيف للسماح للبيئات الافتراضية بالوصول إلى وحدات معالجة الرسومات. يدير النظام عملية التوفير من البداية إلى النهاية، مغطيًا التحقق من توافق الأجهزة، وإعداد رسومات الجهاز الافتراضي، ومزامنة برامج التشغيل بين أنظمة المضيف والضيف. يستخدم التقسيم القائم على السجل وأتمتة النظام النصية للتعامل مع تخصيص الموارد والتحقق من المتطلبات الأساسية.

Bloatynosy is a unified Windows system management tool that removes pre-installed bloatware, manages optional features, configures privacy settings, cleans residual files, and controls Windows updates. It operates through a core system interaction layer that leverages Appx, DISM, PowerShell, Registry, COM, Task Scheduler, and Windows Update APIs to apply configuration changes and manage system state. The tool provides a streamlined post-install and ongoing configuration experience, guiding users through initial setup to skip unwanted prompts and configure privacy early. It suppresses intrusiv

Ladon هو ماسح اختراق شبكة داخلي وأداة تقييم ثغرات مصممة لتحديد العيوب الأمنية والأصول عالية المخاطر عبر قطاعات الشبكة. يعمل كماسح أمني بدون ملفات (fileless)، حيث ينفذ محركه ووحداته مباشرة في الذاكرة لتجنب ترك أثر على القرص في الأنظمة المستهدفة. يتميز المشروع بتكامله كمكون إضافي لمنارات الأوامر (command beacons)، وتحديداً داخل إطار عمل Cobalt Strike. يسمح هذا باكتشاف الشبكة المقيم في الذاكرة واكتشاف الثغرات الأمنية. يدعم علاوة على ذلك العمليات الخفية من خلال تشويش الحمولة والنصوص البرمجية، بالإضافة إلى تقنيات لتجاوز الاكتشاف بواسطة أنظمة اكتشاف واستجابة نقاط النهاية. توفر الأداة مجموعة شاملة من القدرات لما بعد الاستغلال، بما في ذلك تدقيق بيانات الاعتماد، والاستخراج، وتنفيذ هجمات Kerberos لاختراق النطاق. يتعامل مع اكتشاف الأصول عبر المسح متعدد البروتوكولات وبصمات الخدمة لتحديد أنظمة التشغيل وتقنيات الويب. بالإضافة إلى ذلك، يدعم أتمتة الحركة الجانبية، وتصعيد الامتيازات، ونشر حمولات تنفيذ الكود عن بُعد. إطار العمل قابل للتوسيع من خلال معمارية المكونات الإضافية التي تسمح بالتحميل الديناميكي للتجميعات أو النصوص البرمجية الخارجية لإضافة وحدات مسح مخصصة وإثباتات المفهوم.