Awesome GitHub RepositoriesPowerShell

The Windows Package Manager is a command line tool for discovering, installing, upgrading, and configuring software packages on Windows operating systems. It functions as a CLI software installer for automating the deployment and update of applications across individual or machine-wide user profiles. The project extends its functionality through a component object model interface for integration into other Windows applications and a set of native cmdlets that allow system administrators to manage software installation via PowerShell scripts. The tool covers a broad range of package lifecycle

Scoop is a command-line package manager for Windows designed to automate the installation, configuration, and lifecycle management of software. It utilizes a manifest-driven architecture where applications are defined in structured text files, allowing for consistent and repeatable deployments. By leveraging shim-based path management and symlink-based version switching, it enables users to install and toggle between multiple software versions without cluttering the global system environment. The project distinguishes itself through its focus on portability and clean system integration. It su

This project provides a framework for managing multi-agent systems, designed to automate complex software development, infrastructure, and business workflows. It functions as a multi-agent workflow orchestrator that routes tasks to domain-specific workers while maintaining state persistence and infrastructure automation. By leveraging large language models, the system decomposes high-level objectives into actionable plans, ensuring that complex operations are executed with consistency and reliability. The framework distinguishes itself through its hierarchical agent registry and policy-driven

Atlas is an operating system customization framework designed to deploy streamlined versions of Windows. It functions as a performance optimization tool that establishes a baseline environment by removing pre-installed software, unnecessary background services, and resource-heavy processes. The project distinguishes itself through a comprehensive suite of automation and configuration tools that modify low-level system registry keys and group policies. These mechanisms allow users to enforce performance-oriented hardware settings, restrict telemetry and data collection, and manage the lifecycl

Windows10Debloater is a PowerShell-based utility designed to automate the removal of pre-installed software and the modification of system settings on Windows operating systems. It functions as a configuration manager that streamlines the desktop environment by uninstalling bundled applications and adjusting background services to reduce resource consumption. The tool distinguishes itself by providing a centralized orchestration layer for system hardening and privacy management. It allows users to restrict diagnostic data collection and block telemetry services, effectively limiting backgroun

This project is a JavaScript code protection tool designed to transform source code into a version that is difficult for humans to read. Its primary purpose is to protect intellectual property and prevent reverse engineering by altering the original program logic. The tool employs several advanced techniques to hinder analysis, including control flow flattening and the injection of dead code. It can compile functions into custom bytecode executed by an embedded virtual machine and encrypt string literals to prevent static analysis of text. Additional capabilities include anti-debugging mecha

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a

This project is a post-exploitation framework and command and control platform designed for security research and penetration testing. It functions as a remote access tool consisting of a central command server and encrypted executable payloads that establish reverse shell connections. The system utilizes a web-based dashboard for multi-client administration, allowing for remote host monitoring and direct shell access through an in-browser terminal. It generates cross-platform, encrypted binaries that employ a multi-stage delivery chain and a key exchange mechanism to secure communications.

This project is a suite of Windows system optimization scripts and tools designed for debloating, environment configuration, and network optimization. It provides a set of scripts to modify registry settings, disable telemetry, and remove preinstalled software to improve privacy, stability, and overall performance. The tool features a graphical interface that allows users to select and customize system function profiles to generate and execute optimization scripts. It distinguishes itself by automating the deployment of essential C++ and .NET runtimes and simplifying the installation of the W

LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

Universal Ctags is a multi-language symbol indexer and regex-based parsing engine used to extract and catalog functions, classes, and variables from source code. It functions as a source code indexer that scans files across diverse programming languages to create searchable catalogs of definitions and declarations. The project is distinguished by its extensible parser framework, which allows users to define new language rules using regular expressions and configuration files. It supports complex parsing scenarios through state-based parsing, stack-oriented scope tracking, and guest-parser del

This project is a cross-platform dotfiles collection and shell configuration framework designed to standardize development environments across Unix and Windows. It provides a set of version-controlled configuration files and environment settings for text editors, terminal multiplexers, and interactive command line interfaces. The collection functions as a symlink configuration manager, linking settings to the home directory to maintain synchronization across multiple machines. It includes a productivity framework for terminal workflow optimization, incorporating tools for fuzzy finding, direc

K8tools is a multi-stage attack framework that combines memory-only payload execution, credential testing, port forwarding, privilege escalation, and physical USB-based keystroke injection for comprehensive system compromise. At its core, the Ladon PowerShell module loads a multi-function scanner directly into memory, enabling command execution without writing files to disk, while supporting memory-only payload delivery that downloads and runs obfuscated shellcode or PowerShell commands to evade antivirus detection. The framework distinguishes itself through its breadth of integrated capabili

Dieses Projekt ist eine Sammlung von Automatisierungsskripten und Tools, die zur Optimierung von Windows 10 entwickelt wurden. Es fungiert als Debloat-Skript und Konfigurationstool, das verwendet wird, um vorinstallierte Anwendungen zu entfernen und integrierte Funktionen zu deaktivieren, um die Systemleistung zu verbessern. Das Tool bietet einen Mechanismus zur Modifikation von Systemeinstellungen und zur Reduzierung des Overheads von Hintergrunddiensten. Es automatisiert das Entfernen von Bloatware und die Deaktivierung nicht essenzieller Funktionen, um die Ressourcennutzung zu minimieren und Systemressourcen zurückzugewinnen. Das Projekt deckt System-Provisioning und Performance-Tuning durch Registry-Modifikationen, Richtlinien-basiertes Deaktivieren von Funktionen und die Installation essenzieller Softwarekomponenten ab. Es nutzt PowerShell-Automatisierung und WMI-basiertes Entfernen von Komponenten, um diese Konfigurationen auszuführen.

how2 is a terminal-based tool that translates plain-English questions into shell commands using AI and StackOverflow data. It functions as a command-line interface where users describe what they want to do in natural language, and the tool returns the appropriate Unix shell or PowerShell command, with support for generating multi-line Bash scripts from natural language prompts. The tool distinguishes itself through its interactive answer browsing mode, which lets users select and copy from multiple StackOverflow answers directly in the terminal. It includes a fallback search mechanism that qu

Easy-GPU-PV ist ein administratives Toolset zur Überprüfung der Hardwarekompatibilität und zur Automatisierung der Bereitstellung partitionierter Grafikbeschleunigung in virtualisierten Windows-Umgebungen. Es fungiert als Ressourcen-Orchestrator und Manager für die Bereitstellung virtueller Maschinen mit partitionierten Grafikprozessoren. Das Projekt konzentriert sich auf Windows-GPU-Partitionierung und ermöglicht es einer einzelnen physischen Grafikkarte, Hardwarebeschleunigung über mehrere virtualisierte Systeme hinweg zu teilen. Dies wird durch die Automatisierung der Konfiguration von Host-Hardware und Software erreicht, um virtualisierten Umgebungen den Zugriff auf Grafikprozessoren zu ermöglichen. Das System verwaltet den End-to-End-Bereitstellungsprozess, deckt die Überprüfung der Hardwarekompatibilität, das Grafik-Setup virtueller Maschinen und die Synchronisierung von Treibern zwischen Host- und Gastsystemen ab. Es nutzt Registry-gesteuerte Partitionierung und skriptbasierte Systemautomatisierung, um die Ressourcenzuweisung und die Validierung von Voraussetzungen zu handhaben.

Bloatynosy is a unified Windows system management tool that removes pre-installed bloatware, manages optional features, configures privacy settings, cleans residual files, and controls Windows updates. It operates through a core system interaction layer that leverages Appx, DISM, PowerShell, Registry, COM, Task Scheduler, and Windows Update APIs to apply configuration changes and manage system state. The tool provides a streamlined post-install and ongoing configuration experience, guiding users through initial setup to skip unwanted prompts and configure privacy early. It suppresses intrusiv

Ladon ist ein interner Netzwerk-Penetrationsscanner und ein Tool zur Schwachstellenbewertung, das darauf ausgelegt ist, hochriskante Sicherheitslücken und Assets über Netzwerksegmente hinweg zu identifizieren. Es arbeitet als dateiloser Sicherheitsscanner, der seine Engine und Module direkt im Arbeitsspeicher ausführt, um keinen Festplatten-Footprint auf Zielsystemen zu hinterlassen. Das Projekt zeichnet sich durch seine Integration als Plugin für Command-Beacons aus, speziell innerhalb des Cobalt-Strike-Frameworks. Dies ermöglicht speicherresidente Netzwerkerkennung und Schwachstellenerkennung. Es unterstützt zudem Stealth-Operationen durch Payload- und Skript-Obfuskation sowie Techniken zur Umgehung der Erkennung durch Endpoint-Detection-and-Response-Systeme (EDR). Das Tool bietet eine umfassende Suite an Funktionen für Post-Exploitation, einschließlich Credential-Auditing, Extraktion und der Ausführung von Kerberos-Angriffen für Domain-Penetration. Es handhabt Asset-Discovery mittels Multi-Protokoll-Scanning und Service-Fingerprinting, um Betriebssysteme und Webtechnologien zu identifizieren. Zusätzlich unterstützt es die Automatisierung lateraler Bewegungen, Privilegieneskalation und die Bereitstellung von Remote-Code-Execution-Payloads. Das Framework ist über eine Plugin-Architektur erweiterbar, die das dynamische Laden externer Assemblies oder Skripte ermöglicht, um benutzerdefinierte Scanning-Module und Proofs of Concept hinzuzufügen.