3 Mar 2025
The 10 most beneficial tools (open source/free) that I have used for pentesting:
(Not necessarily in order of most value becuse that’s highly dependent upon the engagement)
ADeleg/ADeleginator (mine)
ScriptSentry (mine)
PingCastle
Locksmith
PowerView
PowerSharpPack (suite of tools)
Privesccheck
ADExplorer
NetTools
RMMs
This is all off the cuff. These are the first 10 that come to mind. I’m sure I’m forgetting some.
P.s. I think this says a lot about my method of pentesting as well.
8
32
240
16,566
12 Jan 2024
Just updated Rubeus, Seatbelt, Certify, Invoke-Privesccheck in PowersharpPack and WinPwn. It was time again.
Also WinPwn now uses the C# Inveigh version with way more features enabled.👌
5
90
396
25,116
PowerSharpPack
Many useful offensive CSharp Projects wraped into Powershell for easy usage.
github.com/S3cur3Th1sSh1t/Po…
#infosec #pentesting #redteam
8
32
3,526
25 Jul 2023
3
45
136
15,027
21 Jul 2023
Do you use #PowerSharpPack for your pentests?
Join our con @MCTTP_Con in Munich and meet @ShitSecure the author of this awesome toolset & one of our awesome speakers 😎
mcttp.de/?utm_medium=FH
#infosec #pentest #mcttp23
3
8
1,957
20 Feb 2023
19
54
6,310
For example, with powershell exectuion feature you can use @ShitSecure PowerSharpPack toolkit without touching disk. AMSI will still catch you if you do that but that's not my problem, he probably has cool stuff on Patreon which will not get you in immediate trouble with EDR ;)
1
2
1,419
3 Jan 2023
11
37
5,937
5 Oct 2022
36
81
27 Sep 2022
Saved this Tweet to your Notion database.
Tags: [Powersharppack]
27 Sep 2022
3
35
67
19 Jun 2022
44
98
9 Jun 2022
32
72
26 May 2022
Updated Seatbelt and added KrbRelay (@cube0x0),KrbRelayUp(@dec0ne), SharpImpersonation (mine) && @Nettitude_Labs WSUS/SCCM abuse tools (SharpWSUS/MalSCCM) in PowerSharpPack:
github.com/S3cur3Th1sSh1t/Po…
1
38
137
14 Apr 2022
Just added SharpHoundv4, @KlezVirus's SharpLdapRelayScan and @cube0x0's LdapSignCheck into PowerSharpPack. 👌
The SharpHound update is now also integrated into WinPwn both tools for LDAP enumeration. Also updated the offline version with all last changes.
4
37
136
6 Apr 2022
New blog post:
blog.sunggwanchoi.com/half-a…
Blogged about using Jenkins to half-automate @ShitSecure 's PowerSharpPack payloads.
PoC github repo:
github.com/ChoiSG/jenkins-ps…
3
8
26 Feb 2022
@ShitSecure could be useful to automate powersharppack faster :P could probably automate it further by manually changing methods to public but..
1
5
20 Feb 2022
In addition NanoDump is now integrated into PowerSharpPack & WinPwn, Credit to @s4ntiago_p for the tool and hints for memory loading! Easy peasy LSASS dumping from memory. 🔥
Source code for the Assembly instructions in the comments can be found here (1/2):
1
91
239