Awesome GitHub RepositoriesPowerShell

The Windows Package Manager is a command line tool for discovering, installing, upgrading, and configuring software packages on Windows operating systems. It functions as a CLI software installer for automating the deployment and update of applications across individual or machine-wide user profiles. The project extends its functionality through a component object model interface for integration into other Windows applications and a set of native cmdlets that allow system administrators to manage software installation via PowerShell scripts. The tool covers a broad range of package lifecycle

Scoop is a command-line package manager for Windows designed to automate the installation, configuration, and lifecycle management of software. It utilizes a manifest-driven architecture where applications are defined in structured text files, allowing for consistent and repeatable deployments. By leveraging shim-based path management and symlink-based version switching, it enables users to install and toggle between multiple software versions without cluttering the global system environment. The project distinguishes itself through its focus on portability and clean system integration. It su

This project provides a framework for managing multi-agent systems, designed to automate complex software development, infrastructure, and business workflows. It functions as a multi-agent workflow orchestrator that routes tasks to domain-specific workers while maintaining state persistence and infrastructure automation. By leveraging large language models, the system decomposes high-level objectives into actionable plans, ensuring that complex operations are executed with consistency and reliability. The framework distinguishes itself through its hierarchical agent registry and policy-driven

Atlas is an operating system customization framework designed to deploy streamlined versions of Windows. It functions as a performance optimization tool that establishes a baseline environment by removing pre-installed software, unnecessary background services, and resource-heavy processes. The project distinguishes itself through a comprehensive suite of automation and configuration tools that modify low-level system registry keys and group policies. These mechanisms allow users to enforce performance-oriented hardware settings, restrict telemetry and data collection, and manage the lifecycl

Windows10Debloater is a PowerShell-based utility designed to automate the removal of pre-installed software and the modification of system settings on Windows operating systems. It functions as a configuration manager that streamlines the desktop environment by uninstalling bundled applications and adjusting background services to reduce resource consumption. The tool distinguishes itself by providing a centralized orchestration layer for system hardening and privacy management. It allows users to restrict diagnostic data collection and block telemetry services, effectively limiting backgroun

This project is a JavaScript code protection tool designed to transform source code into a version that is difficult for humans to read. Its primary purpose is to protect intellectual property and prevent reverse engineering by altering the original program logic. The tool employs several advanced techniques to hinder analysis, including control flow flattening and the injection of dead code. It can compile functions into custom bytecode executed by an embedded virtual machine and encrypt string literals to prevent static analysis of text. Additional capabilities include anti-debugging mecha

Azure Docs is the official technical documentation repository for Microsoft Azure, the cloud computing platform. It provides comprehensive guidance on the full spectrum of Azure services, covering everything from core infrastructure components like virtual machines, Kubernetes clusters, and serverless computing to platform services for AI, machine learning, data analytics, and storage. The documentation details how to provision, manage, and govern cloud resources at scale, including policy enforcement, identity management, and cost optimization. The documentation distinguishes Azure through i

Nishang is a PowerShell-based offensive security framework designed for red teaming and penetration testing on Windows targets. It functions as a post-exploitation toolkit and payload generator to automate attacks and manage remote targets. The project provides specialized capabilities for bypassing security controls, such as disabling the Antimalware Scan Interface and employing in-memory execution to avoid disk-based detection. It includes a variety of stealthy command and control mechanisms, utilizing non-standard channels like DNS TXT records, ICMP traffic, and webmail for communication a

This project is a post-exploitation framework and command and control platform designed for security research and penetration testing. It functions as a remote access tool consisting of a central command server and encrypted executable payloads that establish reverse shell connections. The system utilizes a web-based dashboard for multi-client administration, allowing for remote host monitoring and direct shell access through an in-browser terminal. It generates cross-platform, encrypted binaries that employ a multi-stage delivery chain and a key exchange mechanism to secure communications.

This project is a suite of Windows system optimization scripts and tools designed for debloating, environment configuration, and network optimization. It provides a set of scripts to modify registry settings, disable telemetry, and remove preinstalled software to improve privacy, stability, and overall performance. The tool features a graphical interface that allows users to select and customize system function profiles to generate and execute optimization scripts. It distinguishes itself by automating the deployment of essential C++ and .NET runtimes and simplifying the installation of the W

LOLBAS is a curated database and knowledge base of signed Windows binaries that can be misused to bypass security restrictions and execute unauthorized code. It serves as a technical registry that maps trusted system files to their functional capabilities and the offensive tactics they enable. The project distinguishes itself by providing a capability-driven indexing system and a tactics registry that relates legitimate binary functionality to known security evasion techniques. It includes an association layer that links specific system binaries to attack patterns and tactical objectives, pro

NETworkManager is a comprehensive suite of network administration tools designed for the deployment, monitoring, and diagnostic management of enterprise networks. It provides a centralized interface for subnet management, IP address configuration, and wireless network analysis. The project distinguishes itself by integrating a multi-protocol remote administration client that supports SSH, RDP, VNC, Telnet, and PowerShell sessions within a unified tabbed interface. It further differentiates its capabilities through hardware-level discovery using LLDP and CDP frames, alongside the ability to en

Universal Ctags is a multi-language symbol indexer and regex-based parsing engine used to extract and catalog functions, classes, and variables from source code. It functions as a source code indexer that scans files across diverse programming languages to create searchable catalogs of definitions and declarations. The project is distinguished by its extensible parser framework, which allows users to define new language rules using regular expressions and configuration files. It supports complex parsing scenarios through state-based parsing, stack-oriented scope tracking, and guest-parser del

This project is a cross-platform dotfiles collection and shell configuration framework designed to standardize development environments across Unix and Windows. It provides a set of version-controlled configuration files and environment settings for text editors, terminal multiplexers, and interactive command line interfaces. The collection functions as a symlink configuration manager, linking settings to the home directory to maintain synchronization across multiple machines. It includes a productivity framework for terminal workflow optimization, incorporating tools for fuzzy finding, direc

K8tools is a multi-stage attack framework that combines memory-only payload execution, credential testing, port forwarding, privilege escalation, and physical USB-based keystroke injection for comprehensive system compromise. At its core, the Ladon PowerShell module loads a multi-function scanner directly into memory, enabling command execution without writing files to disk, while supporting memory-only payload delivery that downloads and runs obfuscated shellcode or PowerShell commands to evade antivirus detection. The framework distinguishes itself through its breadth of integrated capabili

Acest proiect este o colecție de scripturi de automatizare și instrumente concepute pentru a optimiza Windows 10. Funcționează ca un script de debloat și instrument de configurare utilizat pentru a elimina aplicațiile preinstalate și a dezactiva funcțiile încorporate pentru a îmbunătăți performanța sistemului. Instrumentul oferă un mecanism pentru modificarea setărilor sistemului și reducerea overhead-ului serviciilor de fundal. Automatizează eliminarea bloatware-ului și dezactivarea funcțiilor neesențiale pentru a minimiza utilizarea resurselor și a recupera resursele sistemului. Proiectul acoperă furnizarea sistemului și reglarea performanței prin modificări ale registrului, dezactivarea funcțiilor bazată pe politici și instalarea componentelor software esențiale. Utilizează automatizarea PowerShell și eliminarea componentelor bazată pe WMI pentru a executa aceste configurații.

how2 is a terminal-based tool that translates plain-English questions into shell commands using AI and StackOverflow data. It functions as a command-line interface where users describe what they want to do in natural language, and the tool returns the appropriate Unix shell or PowerShell command, with support for generating multi-line Bash scripts from natural language prompts. The tool distinguishes itself through its interactive answer browsing mode, which lets users select and copy from multiple StackOverflow answers directly in the terminal. It includes a fallback search mechanism that qu

Easy-GPU-PV este un set de instrumente administrative pentru verificarea compatibilității hardware și automatizarea implementării accelerării grafice partiționate în medii Windows virtualizate. Funcționează ca un orchestrator și manager de resurse pentru provizionarea mașinilor virtuale cu unități de procesare grafică partiționate. Proiectul se concentrează pe partiționarea GPU în Windows, permițând unei singure plăci grafice fizice să partajeze accelerarea hardware între mai multe sisteme virtualizate. Realizează acest lucru prin automatizarea configurării hardware-ului și software-ului gazdă pentru a permite mediilor virtualizate să acceseze unitățile de procesare grafică. Sistemul gestionează procesul de provizionare end-to-end, acoperind verificarea compatibilității hardware, configurarea graficii mașinii virtuale și sincronizarea driverelor între sistemele gazdă și cele invitate. Utilizează partiționarea bazată pe regiștri și automatizarea sistemului prin scripturi pentru a gestiona alocarea resurselor și validarea precondițiilor.

Bloatynosy is a unified Windows system management tool that removes pre-installed bloatware, manages optional features, configures privacy settings, cleans residual files, and controls Windows updates. It operates through a core system interaction layer that leverages Appx, DISM, PowerShell, Registry, COM, Task Scheduler, and Windows Update APIs to apply configuration changes and manage system state. The tool provides a streamlined post-install and ongoing configuration experience, guiding users through initial setup to skip unwanted prompts and configure privacy early. It suppresses intrusiv

Ladon este un scanner de penetrare a rețelei interne și un instrument de evaluare a vulnerabilităților conceput pentru a identifica defectele de securitate cu risc ridicat și activele din segmentele de rețea. Operează ca un scanner de securitate fileless, executându-și motorul și modulele direct în memorie pentru a evita lăsarea unei amprente pe disc pe sistemele țintă. Proiectul se distinge prin integrarea sa ca plugin pentru beacon-uri de comandă, specific în cadrul framework-ului Cobalt Strike. Acest lucru permite descoperirea rețelei și detectarea vulnerabilităților rezidente în memorie. Suportă, de asemenea, operațiuni stealth prin obfuscarea payload-urilor și a scripturilor, precum și tehnici de evitare a detectării de către sistemele de endpoint detection and response (EDR). Instrumentul oferă o suită cuprinzătoare de capabilități pentru post-exploatare, inclusiv auditarea credențialelor, extracția și executarea atacurilor Kerberos pentru penetrarea domeniului. Gestionează descoperirea activelor prin scanare multi-protocol și fingerprinting-ul serviciilor pentru a identifica sistemele de operare și tehnologiile web. În plus, suportă automatizarea mișcării laterale, escaladarea privilegiilor și implementarea payload-urilor de execuție de cod la distanță. Framework-ul este extensibil printr-o arhitectură de plugin-uri care permite încărcarea dinamică a ansamblurilor sau scripturilor externe pentru a adăuga module de scanare personalizate și dovezi de concept.