Awesome GitHub RepositoriesPowerShell

The Windows Package Manager is a command line tool for discovering, installing, upgrading, and configuring software packages on Windows operating systems. It functions as a CLI software installer for automating the deployment and update of applications across individual or machine-wide user profiles. The project extends its functionality through a component object model interface for integration into other Windows applications and a set of native cmdlets that allow system administrators to manage software installation via PowerShell scripts. The tool covers a broad range of package lifecycle

Scoop is a command-line package manager for Windows designed to automate the installation, configuration, and lifecycle management of software. It utilizes a manifest-driven architecture where applications are defined in structured text files, allowing for consistent and repeatable deployments. By leveraging shim-based path management and symlink-based version switching, it enables users to install and toggle between multiple software versions without cluttering the global system environment. The project distinguishes itself through its focus on portability and clean system integration. It su

This project provides a framework for managing multi-agent systems, designed to automate complex software development, infrastructure, and business workflows. It functions as a multi-agent workflow orchestrator that routes tasks to domain-specific workers while maintaining state persistence and infrastructure automation. By leveraging large language models, the system decomposes high-level objectives into actionable plans, ensuring that complex operations are executed with consistency and reliability. The framework distinguishes itself through its hierarchical agent registry and policy-driven

Atlas is an operating system customization framework designed to deploy streamlined versions of Windows. It functions as a performance optimization tool that establishes a baseline environment by removing pre-installed software, unnecessary background services, and resource-heavy processes. The project distinguishes itself through a comprehensive suite of automation and configuration tools that modify low-level system registry keys and group policies. These mechanisms allow users to enforce performance-oriented hardware settings, restrict telemetry and data collection, and manage the lifecycl

Windows10Debloater is a PowerShell-based utility designed to automate the removal of pre-installed software and the modification of system settings on Windows operating systems. It functions as a configuration manager that streamlines the desktop environment by uninstalling bundled applications and adjusting background services to reduce resource consumption. The tool distinguishes itself by providing a centralized orchestration layer for system hardening and privacy management. It allows users to restrict diagnostic data collection and block telemetry services, effectively limiting backgroun

This project is a JavaScript code protection tool designed to transform source code into a version that is difficult for humans to read. Its primary purpose is to protect intellectual property and prevent reverse engineering by altering the original program logic. The tool employs several advanced techniques to hinder analysis, including control flow flattening and the injection of dead code. It can compile functions into custom bytecode executed by an embedded virtual machine and encrypt string literals to prevent static analysis of text. Additional capabilities include anti-debugging mecha

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a

This project is a post-exploitation framework and command and control platform designed for security research and penetration testing. It functions as a remote access tool consisting of a central command server and encrypted executable payloads that establish reverse shell connections. The system utilizes a web-based dashboard for multi-client administration, allowing for remote host monitoring and direct shell access through an in-browser terminal. It generates cross-platform, encrypted binaries that employ a multi-stage delivery chain and a key exchange mechanism to secure communications.

This project is a suite of Windows system optimization scripts and tools designed for debloating, environment configuration, and network optimization. It provides a set of scripts to modify registry settings, disable telemetry, and remove preinstalled software to improve privacy, stability, and overall performance. The tool features a graphical interface that allows users to select and customize system function profiles to generate and execute optimization scripts. It distinguishes itself by automating the deployment of essential C++ and .NET runtimes and simplifying the installation of the W

LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

Universal Ctags is a multi-language symbol indexer and regex-based parsing engine used to extract and catalog functions, classes, and variables from source code. It functions as a source code indexer that scans files across diverse programming languages to create searchable catalogs of definitions and declarations. The project is distinguished by its extensible parser framework, which allows users to define new language rules using regular expressions and configuration files. It supports complex parsing scenarios through state-based parsing, stack-oriented scope tracking, and guest-parser del

This project is a cross-platform dotfiles collection and shell configuration framework designed to standardize development environments across Unix and Windows. It provides a set of version-controlled configuration files and environment settings for text editors, terminal multiplexers, and interactive command line interfaces. The collection functions as a symlink configuration manager, linking settings to the home directory to maintain synchronization across multiple machines. It includes a productivity framework for terminal workflow optimization, incorporating tools for fuzzy finding, direc

K8tools is a multi-stage attack framework that combines memory-only payload execution, credential testing, port forwarding, privilege escalation, and physical USB-based keystroke injection for comprehensive system compromise. At its core, the Ladon PowerShell module loads a multi-function scanner directly into memory, enabling command execution without writing files to disk, while supporting memory-only payload delivery that downloads and runs obfuscated shellcode or PowerShell commands to evade antivirus detection. The framework distinguishes itself through its breadth of integrated capabili

Este proyecto es una colección de scripts de automatización y herramientas diseñadas para optimizar Windows 10. Funciona como un script de debloat y herramienta de configuración utilizada para eliminar aplicaciones preinstaladas y deshabilitar funciones integradas para mejorar el rendimiento del sistema. La herramienta proporciona un mecanismo para modificar la configuración del sistema y reducir la sobrecarga de servicios en segundo plano. Automatiza la eliminación de bloatware y la desactivación de funciones no esenciales para minimizar el uso de recursos y recuperar recursos del sistema. El proyecto cubre el aprovisionamiento del sistema y el ajuste del rendimiento mediante modificaciones del registro, deshabilitación de funciones basada en políticas y la instalación de componentes de software esenciales. Utiliza automatización de PowerShell y eliminación de componentes basada en WMI para ejecutar estas configuraciones.

how2 is a terminal-based tool that translates plain-English questions into shell commands using AI and StackOverflow data. It functions as a command-line interface where users describe what they want to do in natural language, and the tool returns the appropriate Unix shell or PowerShell command, with support for generating multi-line Bash scripts from natural language prompts. The tool distinguishes itself through its interactive answer browsing mode, which lets users select and copy from multiple StackOverflow answers directly in the terminal. It includes a fallback search mechanism that qu

Easy-GPU-PV es un conjunto de herramientas administrativas para verificar la compatibilidad del hardware y automatizar el despliegue de aceleración gráfica particionada en entornos Windows virtualizados. Funciona como un orquestador y gestor de recursos para aprovisionar máquinas virtuales con unidades de procesamiento gráfico particionadas. El proyecto se centra en la partición de GPU en Windows, permitiendo que una sola tarjeta gráfica física comparta la aceleración de hardware a través de múltiples sistemas virtualizados. Logra esto automatizando la configuración del hardware y software del host para permitir que los entornos virtualizados accedan a las unidades de procesamiento gráfico. El sistema gestiona el proceso de aprovisionamiento de extremo a extremo, cubriendo la verificación de compatibilidad de hardware, la configuración de gráficos de la máquina virtual y la sincronización de controladores entre los sistemas host y invitado. Utiliza particionamiento basado en registro y automatización de sistemas mediante scripts para manejar la asignación de recursos y la validación de requisitos previos.

Bloatynosy is a unified Windows system management tool that removes pre-installed bloatware, manages optional features, configures privacy settings, cleans residual files, and controls Windows updates. It operates through a core system interaction layer that leverages Appx, DISM, PowerShell, Registry, COM, Task Scheduler, and Windows Update APIs to apply configuration changes and manage system state. The tool provides a streamlined post-install and ongoing configuration experience, guiding users through initial setup to skip unwanted prompts and configure privacy early. It suppresses intrusiv

Ladon es un escáner de penetración de red interna y herramienta de evaluación de vulnerabilidades diseñada para identificar fallas de seguridad y activos de alto riesgo a través de segmentos de red. Opera como un escáner de seguridad sin archivos (fileless), ejecutando su motor y módulos directamente en la memoria para evitar dejar una huella en el disco en los sistemas objetivo. El proyecto se distingue por su integración como plugin para balizas de comando (command beacons), específicamente dentro del framework Cobalt Strike. Esto permite el descubrimiento de red y la detección de vulnerabilidades residentes en memoria. Además, admite operaciones sigilosas mediante la ofuscación de cargas útiles y scripts, así como técnicas para eludir la detección por parte de sistemas de detección y respuesta de endpoints (EDR). La herramienta proporciona un conjunto completo de capacidades para la post-explotación, incluyendo auditoría de credenciales, extracción y la ejecución de ataques Kerberos para la penetración de dominios. Maneja el descubrimiento de activos mediante escaneo multiprotocolo y huellas dactilares de servicios para identificar sistemas operativos y tecnologías web. Además, admite la automatización del movimiento lateral, la escalada de privilegios y el despliegue de cargas útiles de ejecución remota de código. El framework es extensible a través de una arquitectura de plugins que permite la carga dinámica de ensamblajes o scripts externos para añadir módulos de escaneo personalizados y pruebas de concepto.