p0wnedShell
A PowerShell runspace post-exploitation toolkit written in C# that bypasses security mitigations and includes offensive modules.
What is p0wnedShell?
p0wnedShell is a PowerShell runspace post-exploitation toolkit written in C# that executes PowerShell commands within a .NET environment without using powershell.exe. It bundles offensive modules like PowerSploit, Mimikatz, and BloodHound to facilitate attacks in Active Directory environments while bypassing security mitigations. The tool enables red teams to perform stealthy post-exploitation and helps blue teams develop defensive strategies.
Security professionals, red teamers, and penetration testers conducting post-exploitation activities in Windows and Active Directory environments. It is also useful for blue teams seeking to understand and defend against advanced attack techniques.
Developers choose p0wnedShell for its ability to run PowerShell offensively without triggering detections on powershell.exe, its comprehensive integration of popular exploitation tools, and its features for process masquerading and privilege escalation that enhance stealth and effectiveness in security assessments.
Overview
PowerShell Runspace Post Exploitation Toolkit
Use Cases
Best For
- Conducting post-exploitation in Active Directory environments
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
