p3nt4/PowerShdll

Health v2 · maintenance only

Adoption not part of the score

1831 stars · 255 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

PowerShdll is a C# tool that runs PowerShell commands and scripts without invoking powershell.exe, by loading PowerShell automation DLLs via rundll32.exe, InstallUtil, regsvcs, regasm, regsvr32, or as a standalone executable. It is primarily used in red-team scenarios to bypass application whitelisting and software restrictions such as AppLocker.

Use cases

• run powershell scripts when powershell.exe is blocked
• bypass applocker application whitelisting
• execute base64-encoded powershell payloads via rundll32
• download and run remote scripts without powershell.exe
• start an interactive powershell console from a dll host

When to choose

• you need to execute PowerShell on a Windows host where powershell.exe is restricted
• you are performing authorized penetration testing or red-team exercises against AppLocker-protected systems

When to avoid

• you need a general-purpose PowerShell replacement on unrestricted systems
• you require reliable error output and full interactive features
• you need a maintained tool with recent updates or modern .NET support

Facets

cli-tool · maturity maintenance

security cli security penetration-testing windows windows cli powershell applocker-bypass defense-evasion red-team rundll32 offensive-security

Member repositories

For agents

markdown · JSON · MCP: product_card(name="p3nt4/PowerShdll")