#Windows
Knowledge base entries tagged Windows.
InvokeADCheck is a PowerShell module designed to evaluate the security of Active Directory environments.
ADCollectorADCollector is a lightweight tool that enumerates the Active Directory environment to identify possible attack vectors. It will give you a basic understanding of the configuration/deployment of the environment as a starting point.
ADSearchA tool written for cobalt-strike's execute-assembly command that allows for more efficent querying of AD.
cmdMicrosoft Command Prompt.
CainARP poisoning / credentials - network.
GodModeQuickly access administrative tools, backup and restore options and other important management settings from a single window.
Microsoft WindowsWindows related commands.
CFF ExplorerCFF Explorer was designed to make PE editing as easy as possible, but without losing sight on the portable executable's internal structure.
ipconfigDisplays all current TCP/IP network configuration values and refreshes Dynamic Host Configuration Protocol (DHCP) and Domain Name System (DNS) settings.
DKIM-ExchangeMicrosoft Exchange DKIM-signer.
nbtstatDisplays protocol statistics and current TCP/IP connections using NBT (NetBIOS over TCP/IP).
DNSbenchA unique, comprehensive, accurate & free Windows (and Linux/Wine) utility to determine the exact performance of local and remote DNS nameservers.
net groupAdds, displays, or modifies global groups in domains.
dnSpyA debugger and .NET assembly editor. You can use it to edit and debug assemblies even if you don't have any source code available.
net userAdds or modifies user accounts, or displays user account information.
DomainPasswordSprayPowershell script to perform password spray attack in Active Directory.
net viewUsed to manage File Shares.
Explorer++Explorer++ is a small and fast file manager for Windows. With tabs, bookmarks and advanced file operations, it allows you to be much more productive!
netshIs a command-line utility that allows you to configure and display the status of various network communications.
FatxplorerThe ultimate Xbox storage device explorer.
NltestPerforms network administrative tasks.
nslookupDisplays information that you can use to diagnose Domain Name System (DNS) infrastructure.
WindowsTools for Microsoft Windows.
HD TuneHD Tune (Pro) is a hard disk / SSD utility with many functions. It can be used to measure the drive's performance, scan for errors, check the health status (S.M.A.R.T.), securely erase all data and much more.
powershellWindows Powershell handy commands.
IcaclsDisplays or modifies discretionary access control lists (DACLs) on specified files, and applies stored DACLs to files in specified directories.
regeditRegistry Editor.
iDevice Panic Log AnalyzerA quick and easy panic log extraction and analysis tool for iDevices.
RouteManipulates network routing tables.
IIS-cryptoA free tool that gives administrators the ability to enable or disable protocols, ciphers, hashes and key exchange algorithms on Windows Server 2008, 2012, 2016 and 2019.
SchtasksEnables an administrator to create, delete, query, change, run and end scheduled tasks on a local or remote system.
BalenaEtcherFlash OS images to SD cards & USB drives, safely and easily.
inSSIDerDefeat Slow WiFi.
InveighA PowerShell ADIDNS/LLMNR/NBNS/mDNS/DNS spoofer and man-in-the-middle tool designed to assist penetration testers/red teamers that find themselves limited to a Windows system.
Lossless Audio CheckerA utility to check whether a WAVE or FLAC file is truly lossless or not.
MinidumpC# implementation of mimikatz/pypykatz minidump functionality to get credentials from LSASS dumps.
linWinPwnSwiss-Army knife for Active Directory Pentesting using Linux.
Mp3tagMp3tag is a powerful and easy-to-use tool to edit metadata of audio files.
OneDriveExplorerOneDriveExplorer is a command line and GUI based application for reconstructing the folder structure of OneDrive from the <UserCid>.dat file.
BurpsuiteWebProxy for analysis.
PlinkCommand-line connection utility.
NetworkMinerNetworkMiner is an open source Network Forensic Analysis Tool (NFAT) for Windows (but also works in Linux / Mac OS X / FreeBSD)..
powercatNetcat: The powershell version. (Powershell Version 2 and Later Supported).
PowerToysWindows system utilities to maximize productivity.
Prefetch-BrowserBrowse Windows Prefetch file properties.
PSPKIAuditPowerShell toolkit for auditing Active Directory Certificate Services (AD CS).
RecuvaRecover your deleted files quickly and easily.
Room EQ WizardRoomEQwizard is free room acoustics and audio device measurement and analysis software for room, loudspeaker and device responses.
RufusCreate bootable USB drives the easy way.
SysinternalsThe Sysinternals web site was created in 1996 by Mark Russinovich to host his advanced system utilities and technical information. Whether you're an IT Pro or a developer, you'll find Sysinternals utilities to help you manage, troubleshoot and diagnose your Windows systems and applications.
TaskManagerBitmapTakes a bitmap that is the size or width of Task Managers's CPU core view (ideally with single cells showing instantaneous percent CPU) and scrolls the bitmap using threads that consume CPU based on the pixel's greyscale (black is 100% CPU).
W10privacyPrivacy made easy.
ChntpwChange password of a user in a Windows SAM file.
Winaero TweakerCollection of Tweaks for Windows.
Xirrus Wi-Fi InspectorXirrus Wi-Fi Inspector is special software that allows users to find the various Wi-Fi hotspots in their area and get connected quickly and conveniently. The software also helps to troubleshoot connection problems so that users can make sure they are always connected to the net when they need to be.
CryptomatorFree client-side encryption for your cloud files. Open source software: No backdoors, no registration.
ViscosityA first class OpenVPN client that lets you secure your network with ease & style.
FranzMessaging app for WhatsApp, Slack, Telegram, HipChat, Hangouts and many many more.
GitGit is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals.
GitDumpGitDump dumps the source code from .git when the directory traversal is disabled.
HandBrakeHandBrake is a tool for converting video from nearly any format to a selection of modern, widely supported codecs.
MattermostMattermost is a messaging and collaboration platform. With Mattermost, you can integrate the tools you use every day into one place and never miss a notification or task.
Resilio SyncA fast, reliable, and simple file sync and share solution, powered by P2P technology.
SQLmapAutomatic SQL injection and database takeover tool.
TabbyTabby (formerly Terminus) is a highly configurable terminal emulator, SSH and serial client for Windows, macOS and Linux.
TeraCopyCopy your files faster and more securely.