Tools

kitsune-de/stealth_call

Header-only Windows x64 indirect syscall library. Zero CRT, zero IAT, VEH anti-BP, AMSI/ETW bypass, W^X memory, per-call dynamic stubs.

ivan-sincek/invoker

Penetration testing utility and antivirus assessment tool.

0xqn/clsidfinder

PowerShell enumeration script for discovering service-backed COM objects via CLSID/AppID correlation and activation testing.

mgeeky/unhookme

Dynamic Windows API resolver and unhooker that detects and restores hooked functions (IAT, EAT, inline patches) to invoke unmonitored system calls…

checkymander/sharp-smbexec

C# implementation of SMBExec for remote command execution on Windows targets using NTLM password hashes, enabling lateral movement and pass-the-hash…

000tonio/cve-2021-1675

PowerShell exploit for CVE-2021-1675 PrintNightmare that disables AMSI and creates a local administrator account on vulnerable Windows systems.

b5null/invoke-badsuccessor.ps1

PowerShell Script to automatically abuse the BadSuccessor vulnerability (CVE-2025-53779)

xiaolvchen/cve-2025-54100

CVE-2025-54100（PowerShell 远程代码执行漏洞）

kudaes/dinvoke_rs

Dynamically invoke arbitrary unmanaged code

thewover/dinvoke

Dynamically invoke arbitrary unmanaged code from managed code without PInvoke.

peewpw/invoke-psimage

Encodes a PowerShell script in the pixels of a PNG file and generates a oneliner to execute

leo4j/invoke-adenum

Automated Active Directory auditing and enumeration tool that generates detailed HTML audit reports with CSV/XLSX export, designed for security…

joelgmsec/invoke-stealth

Simple & Powerful PowerShell Script Obfuscator

n00py/outpacket

This cheatsheet maps common impacket workflows to their modern alternatives

tokyoneon/credphish

PowerShell script that invokes legitimate credential prompts and exfiltrates captured passwords over DNS using CredentialPicker and Resolve-DnsName.

wietze/invoke-argfuscator

Invoke-ArgFuscator is an open-source, cross-platform PowerShell module that helps generate obfuscated command-lines for common system-native…

joelgmsec/invoke-transfer

PowerShell tool for transferring files in restricted environments (Citrix, RDP, VNC, Guacamole) via clipboard, Base64 chunks, keystrokes, or OCR…