threatexpress/red-team-scripts

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1146 stars · 196 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A collection of red team focused tools, PowerShell scripts, and notes for offensive security engagements, including host and domain enumeration utilities. It includes scripts like Invoke-HostEnum for Windows situational awareness and privilege escalation checks, plus integrations for Cobalt Strike and Empire.

Use cases

• enumerate windows host after initial compromise
• find privilege escalation paths on a windows machine
• collect domain recon during a red team engagement
• gather browser credentials and interesting files from a host
• integrate situational awareness into cobalt strike or empire
• learn red team techniques and tooling

When to choose

• you need lightweight PowerShell-based host and domain enumeration compatible with older systems (PowerShell v2)
• you want a curated set of offensive scripts and notes from real engagements
• you need post-exploitation tooling that integrates with Cobalt Strike or Empire

When to avoid

• you need a maintained, comprehensive C2 framework or full adversary emulation platform
• you require formal documentation, tests, or package management rather than loose scripts
• your work is defensive-only and you need detection tooling instead of offensive scripts

Facets

cli-tool · maturity maintenance

security penetration-testing osint developer-tools security penetration-testing windows windows cli python red-team powershell post-exploitation privilege-escalation situational-awareness cobalt-strike empire offensive-security command-line

Member repositories

For agents

markdown · JSON · MCP: product_card(name="threatexpress/red-team-scripts")