S3cur3Th1sSh1t/WinPwn

Health v2 · maintenance only

Adoption not part of the score

3693 stars · 536 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

WinPwn is a PowerShell-based automation framework for internal Windows penetration testing and Active Directory security assessment. It bundles well-known offensive security scripts for reconnaissance, privilege escalation, and credential dumping behind a menu-driven interface with automatic proxy support.

Use cases

• automate internal windows penetration tests
• enumerate active directory domain vulnerabilities
• dump credentials and lsass memory on a compromised host
• run local privilege escalation checks on windows
• perform smb relay and mitm attacks during red team engagements
• find passwords and sensitive files on a windows system

When to choose

• you are doing authorized internal pentesting or red teaming on Windows/AD environments
• you want a single menu-driven script chaining many recon and exploitation tools
• you need proxy-aware execution on a target network
• you need an offline-capable toolkit on a machine without internet access

When to avoid

• you need defensive or blue-team tooling rather than offensive testing
• you are on Linux or macOS - it targets Windows PowerShell
• you want stealthy, low-noise tooling - it bundles widely signatured scripts
• you are not authorized to test the target system

Facets

cli-tool · maturity active

penetration-testing security workflow-automation developer-tools penetration-testing security windows windows cli red-team active-directory privilege-escalation reconnaissance powershell offensive-security credential-dumping

Member repositories

For agents

markdown · JSON · MCP: product_card(name="S3cur3Th1sSh1t/WinPwn")