PowerSploit
A PowerShell post-exploitation framework for penetration testers, providing modules for code execution, persistence, reconnaissance, and credential theft.
What is PowerSploit?
PowerSploit is a PowerShell post-exploitation framework used by penetration testers and security researchers to perform advanced attacks after initial system compromise. It provides modules for executing code, maintaining persistence, bypassing antivirus, stealing credentials, and conducting reconnaissance, all while minimizing disk writes to evade detection. The framework is designed to integrate seamlessly into security assessments, offering a suite of tools that operate in memory to reduce forensic evidence.
Penetration testers, red teamers, and security professionals conducting authorized security assessments who need advanced post-exploitation capabilities on Windows systems. It is also used by researchers studying offensive security techniques and defense evasion.
Developers choose PowerSploit because it provides a comprehensive, PowerShell-native toolkit for post-exploitation that emphasizes stealth and operational security. Its modular design, in-memory execution, and avoidance of disk writes make it a preferred choice for evading endpoint detection and response (EDR) solutions during security engagements.
Overview
PowerSploit - A PowerShell Post-Exploitation Framework
Use Cases
Best For
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
