Ecosyste.ms: Awesome
An open API service indexing awesome lists of open source software.
https://github.com/zweilosec/PowerShell-Administration-Tools
Powershell scripts for automating common system administration, blue team, and digital forensics tasks
https://github.com/zweilosec/PowerShell-Administration-Tools
automation forensics forensics-investigations offensive-security powershell powershell-adminscripts powershell-scripts red-team redteam system-administration
Last synced: about 1 month ago
JSON representation
Powershell scripts for automating common system administration, blue team, and digital forensics tasks
- Host: GitHub
- URL: https://github.com/zweilosec/PowerShell-Administration-Tools
- Owner: zweilosec
- Created: 2020-03-06T12:58:14.000Z (almost 5 years ago)
- Default Branch: master
- Last Pushed: 2022-12-28T19:57:20.000Z (about 2 years ago)
- Last Synced: 2024-08-13T07:05:20.797Z (5 months ago)
- Topics: automation, forensics, forensics-investigations, offensive-security, powershell, powershell-adminscripts, powershell-scripts, red-team, redteam, system-administration
- Language: PowerShell
- Homepage:
- Size: 122 KB
- Stars: 54
- Watchers: 2
- Forks: 15
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
- jimsghstars - zweilosec/PowerShell-Administration-Tools - Powershell scripts for automating common system administration, blue team, and digital forensics tasks (PowerShell)
README
---
description: >-
A collection of Windows PowerShell tools for making system administration and
troubleshooting easier.
---# PowerShell Administration Tools
PowerShell scripts for automating common system administration/ digital forensics tasks. Suggestions, submissions, updates, and requests are always welcome!
| Script Name | Description |
| :--- | :--- |
| [Clear-ExcessCertificates](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Clear-ExcessCertificates.ps1) | Clears all PIV certificates from the local store except for the current user's |
| [Create-ADUserFromCsv](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Create-ADUserFromCsv.ps1) | Batch creates users in Active Directory from a .csv file. |
| [Get-Computer\_Inventory](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Get-ComputerInventoryToCSV.ps1) | Searches a network for the computers specified \(by computer name\) and reports a list of inventory-related information for those computers. IP, MAC, Make, Model, Serial, and Last User. ~~Requires WinRM to be running on the system~~ Use the `-DCOM` argument to run without WinRM! Does not require admin rights. |
| [Get-Monitor\_Inventory](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Get-Monitor_Inventory.ps1) | Searches a domain for the computers specified \(by computer name\) and reports a list of inventory-related information for the attached Monitors. Make, Model, Serial |
| [Locate-UserProfile](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Locate-UserProfile.ps1) | Searches a domain for the user ID specified. Returns a list of all of the computers that user has signed into, their $home folder, and the last time they logged in. Saves output in a CSV file. |
| [Add-RemotePrinter](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Add-RemotePrinter.ps1) | Adds a printer to the computer specified \(by computer name\). Requires some information such as printer IP, Driver long name, and the name you want the printer to be displayed as. |
| [Get-SoftwareInventory](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Get-SoftwareInventory.ps1) | Outputs a list of software installed on the target computer from the registry. Lists ComputerName, Software DisplayName, Version, and Publisher. |
| [New-Shortcut](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/New-Shortcut.ps1) | Creates a new shortcut (.lnk) file with the specified properties. |
| [Get-ShortcutProperties](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Get-ShortcutProperties.ps1) | Get the properties of the specified shortcut (.lnk) file |
| [Create-IsoWithLnk](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Create-IsoWithLnk.ps1) | A fun attempt at creating an offensive tool. This one creates a .lnk file, and autostart.inf file that links to the .lnk, and an ISO that contains them both. In a vulnerable system this might be able to autorun something (non-malicious of course!) All of this wrapped up in a nice little GUI form! |## Network Tools
| Script Name | Description |
| :--- | :--- |
| [Get-OpenPortsWithProcess](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Network/Get-OpenPortsWithProcess.ps1) | A simple script for listing open TCP or UDP ports.
Has three options:
* `-TCP` : show TCP ports
* `-UDP` : show UDP ports
* `-Listening` : Show only listening ports |
| [Renew-DHCP](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Network/Renew-DHCP.ps1) | Releases DHCP reservations for all active interfaces and renews them. Fully PowerShell equivilent to running `ipconfig /release; ipconfig /renew`. |
|[Scan-TCPPorts](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Network/Scan-TCPPorts.ps1) | A simple TCP port scanner. Takes in a comma separated list of IPs, and of ports. An output file (csv or txt) can be specified as well. |## Snippets
Drop these snippets into your scripts to add this functionality. May need to modify variables to fit your use cases.| Script Name | Description |
| :--- | :--- |
| [Run-ADPreChecks](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Snippets/Run-ADPreChecks.ps1) |Code snippet to do some preliminary checks to ensure a script will function
Checks for: administrator privileges, PowerShell v5 or greater, and the ActiveDirectory PowerShell modules |
| [Select-FileWithDialog](https://github.com/zweilosec/PowerShell-Administration-Tools/blob/master/Snippets/Select-FileWithDialog.ps1) | Code snippet to display an Explorer window to select a file (.csv and .txt in this example) |#### More content from Zweilosec:
## [OSCP prep and CTF notes](https://zweilosec.gitbook.io/hackers-rest/)
If you like this content and would like to see more, please consider [buying me a coffee](https://www.buymeacoffee.com/zweilosec)!