PowerShellMafia/PowerSploit

Health v2 · maintenance only

Flags: archived no_license

Adoption not part of the score

13085 stars · 4709 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

PowerSploit is a collection of PowerShell modules for post-exploitation tasks during penetration tests, covering code execution, persistence, AV bypass, exfiltration, and reconnaissance. It is no longer maintained, with the last release in 2020.

Use cases

• inject shellcode or DLLs into processes on a compromised Windows host
• dump credentials in memory with Mimikatz via PowerShell
• establish persistence on a target machine
• encode and obfuscate PowerShell payloads to evade detection
• harvest Group Policy Preferences passwords
• log keystrokes on a target
• enumerate and manipulate Windows logon tokens

When to choose

• you are a penetration tester or red teamer working on Windows targets
• you need a well-known reference toolkit for offensive PowerShell techniques
• you are studying post-exploitation tradecraft

When to avoid

• you need actively maintained tooling that evades modern Windows Defender and AMSI
• you want supported software for production security operations
• you are on non-Windows platforms

Facets

framework · maturity abandoned

penetration-testing security reverse-engineering security penetration-testing windows windows post-exploitation red-team powershell-modules offensive-security pentesting

Member repositories

For agents

markdown · JSON · MCP: product_card(name="PowerShellMafia/PowerSploit")