Open Source PowerShell Software - Page 3
Sort By:
PowerShell Software
Browse free open source PowerShell Software and projects below. Use the toggles on the left to filter open source PowerShell Software by OS, license, language, programming language, and project status.
-
Our Free Plans just got better! | Auth0You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
-
Cut Data Warehouse Costs by 54%BigQuery delivers 54% lower TCO with exabyte scale and flexible pricing. Free migration tools handle the SQL translation automatically.
-
1
Desktop Commander MCP
AI-powered MCP server for desktop file and terminal automation
Desktop Commander MCP is an advanced Model Context Protocol server designed to extend AI assistants with direct control over a user’s local machine, including the file system and terminal. It integrates with clients like Claude Desktop to enable AI-driven workflows such as editing files, executing commands, and automating development tasks from a single conversational interface. Desktop Commander MCP builds on top of an MCP filesystem server and enhances it with powerful search, replace, and code editing capabilities tailored for real-world development environments. It allows users to run terminal commands with streaming output, manage long-running processes, and even execute code in memory without saving files. It also supports working with structured and document formats such as Excel, PDF, and DOCX, enabling AI to read, modify, and generate these files directly. -
2
Re-image the Windows
These scripts to configure a ready-to-use Windows environment
Reimage-Windows is a repo for automating and documenting the process of reinstalling or “reimaging” Windows, turning what is normally a manual, error-prone chore into a repeatable pipeline. It bundles scripts, configuration, and notes so that after a clean Windows install you can run one or two commands to get your environment back. The project is aimed at people who rebuild machines often, maintain several PCs, or just want a disaster-recovery style setup for Windows. It encourages treating OS setup like code: versioned, reviewable, and improvable over time. Because it’s public, you can see exactly what’s being installed and customize it for your own drivers, packages, and tools. The end goal is a faster path from “blank Windows” to “fully set up workstation” with minimal clicks. -
3
Win Debloat Tools
Re-imagining Windows like a minimal OS install
Win Debloat Tools is an open-source PowerShell-based toolkit designed to strip away unnecessary components, preinstalled apps, and services from modern Windows installations to create a leaner, more responsive operating system. It aims to re-imagine Windows as if it were installed in a minimal state, removing bloatware and optional features with minimal impact on core functionality, though it warns users to proceed with caution since changes can be extensive. The project supports both graphical and CLI execution flows that let users individually select tweaks or apply a broad “Apply Tweaks” preset that automates many optimizations at once. It typically creates a system restore point before making changes, and also logs actions for transparency so you can review what was done. Beyond simple removal of apps, it can optimize services, cleanup temporary system files, remove residual Windows.old folders, and generally reduce resource overhead for better performance and battery life. -
4
WinPwn
Automation for internal Windows Penetrationtest / AD-Security
WinPwn is a PowerShell-based toolkit for automating internal Windows penetration testing and Active Directory reconnaissance. It streamlines many manual steps by integrating reconnaissance modules like Seatbelt, Inveigh, Rubeus, and PrivescCheck. With proxy auto‑detection, endpoint enumeration, and exploitation routines, it's widely used in red team and blue team tool chains. -
Custom VMs From 1 to 96 vCPUs With 99.95% UptimeLive migration and automatic failover keep workloads online through maintenance. One free e2-micro VM every month.
-
5
douyin
Open source Douyin crawler for collecting and downloading public data
DouyinCrawler is an open source data collection tool designed to gather publicly available information from the Douyin platform. It demonstrates how to build a Python-based web crawler combined with a graphical interface and command line functionality. It allows users to collect data from various types of Douyin content, including user profiles, videos, hashtags, and music pages. DouyinCrawler supports both automated scraping and batch operations to process multiple targets efficiently. It also integrates with the Aria2 download utility to enable large-scale downloading of videos and images associated with collected content. It includes multiple usage modes such as a desktop GUI, a web service interface, and a command line tool for flexible deployment. In addition to data collection, it supports incremental updates so users can track and gather newly published content without reprocessing previously collected data. -
6
windsurf.vim
Free, ultrafast Copilot alternative for Vim and Neovim
windsurf.vim is a plugin for Vim and Neovim by Exafunction (formerly part of the Codeium project) that brings in AI-driven code completion and assistance capabilities. The aim is to provide a “free, ultrafast” alternative to other AI code assistants (such as GitHub Copilot) directly within Vim/Neovim. Once installed and configured, windsurf.vim can suggest code completions, generate multi-line snippets based on comments or invitation in code, and make the editing experience more predictive and context-aware. The plugin supports major programming languages and allows you to trigger completions as you type—especially after comments or partial code constructs. Because it is designed to integrate with Vim’s editing model, it offers suggestions in-line and leverages virtual text or inline indicators when supported. Many developers using Neovim look to this plugin as a way to bring modern AI-powered code-assistance into their terminal-centric workflow. -
7
Universal Intel Chipset Device Updater
Automatic Intel chipset INF updater with multi-layer security
Universal Intel Chipset Device Updater is an advanced, security-focused tool that automatically detects your Intel hardware and installs the latest official chipset INF files with enterprise-grade safety measures. Unlike Intel's bloated 25-year-old package, this tool installs only the INF files your system actually needs — nothing more, nothing less. KEY SECURITY FEATURES: • SHA-256 hash verification for all downloads • Intel Authenticode digital signature validation • Automatic System Restore Point creation before installation • Dual-source download with backup fallback • Self-hash verification to detect tampering SUPPORTED HARDWARE: • Intel chipsets from Sandy Bridge (2nd Gen) to Panther Lake (17th Gen) • Desktop, mobile, workstation, and server platforms • Consumer and Xeon/Server families DEPLOYMENT OPTIONS: • One-click SFX executable (recommended) • PowerShell script direct execution • PowerShell Gallery installation • MDM/Intune silent deployment with -qui -
8
HAMLIB SDK (Evolved JTSDK)
Hamlib Software Developer's Kit Supporting Qt & JT-based HAM Software
The aim is to support learning withinof Hamlib-centric software . See https://hamlib-sdk.sourceforge.io . This kit is designed to support research and learning into Hamlib (https://sourceforge.net/projects/hamlib/) and WSJT-X (https://wsjt.sourceforge.io/wsjtx.html). Follow discussion at JTSDK @ GROUPS.IO . The file(s) needed to deploy the kit are : - https://sourceforge.net/projects/hamlib-sdk/files/Windows/JTSDK-4.1-Stream/JTSDK64-4.1.1.exe - https://sourceforge.net/projects/hamlib-sdk/files/Windows/JTSDK-4.1-Stream/JTSDK64-4.1.1-U1.exe Hamlib is dynamic due to the differences in hardware capabilities. See: https://sourceforge.net/projects/hamlib/ Current efforts focus on learning and compiling "JT" software. Packages are provided that enable kits to be easily maintained and updated. Thanks to all the contributors - Remembering Mike W9MDB(sk) - who have contributed to us receiving recognition with SourceForge with a Community Choice Award. -
9
BadUSB
Flipper Zero badusb payload library
This project explores USB device emulation attacks—commonly called BadUSB—by demonstrating how commodity USB hardware can impersonate keyboards, network adapters, or storage devices to perform scripted actions on a host. It typically contains firmware examples, payloads, and explanations showing how a device presenting as a Human Interface Device (HID) can inject keystrokes, open shells, or orchestrate data exfiltration when plugged into a machine. The codebase is frequently intended for security research and defensive testing: defenders and red teams use it to validate endpoint controls, USB whitelisting, and user training. Due to the dual-use nature of such techniques, responsible repositories emphasize lab-only experiments, consent-based testing, and mitigations like disabling autorun, enforcing device policies, and using endpoint detection. -
Build Agents and Models on One PlatformGemini Enterprise Agent Platform is Google Cloud's comprehensive platform for developers to build, scale, govern, and optimize agents and models. Choose from Google's most advanced models and third-party models like Anthropic's Claude Model Family.
-
10
BashBunny Payloads
The Official Bash Bunny Payload Repository
This repository is a curated collection of payload scripts and examples for the Hak5 Bash Bunny device, a programmable USB attack platform. Payloads demonstrate how the device can emulate human interface devices (keyboard/mouse), Ethernet adapters, serial gadgets, or mass storage to automate complex workflows once plugged into a host. The collection ranges from benign administrative automation to offensive security demonstrations used in penetration testing, showcasing patterns like keystroke automation, reverse shells, credential capture (for lab use), and lateral transport techniques. Each payload typically includes a payload.txt control file with stages and configurable parameters so operators can adapt behavior to different targets. Because the device and its payloads are powerful, the repository emphasizes responsible use—training, red-team engagements with authorization, and awareness of legal/ethical boundaries. -
11
Claude-Flow
The leading agent orchestration platform for Claude
Claude-Flow v2 Alpha is an advanced AI orchestration and automation framework designed for enterprise-grade, large-scale AI-driven development. It enables developers to coordinate multiple specialized AI agents in real time through a hive-mind architecture, combining swarm intelligence, neural reasoning, and a powerful set of 87 Modular Control Protocol (MCP) tools. The platform supports both quick swarm tasks and persistent multi-agent sessions known as hives, facilitating distributed AI collaboration with persistent contextual memory. At its core, Claude-Flow integrates Dynamic Agent Architecture (DAA) for self-organizing agent management, neural pattern recognition accelerated by WebAssembly SIMD, and a SQLite-based memory system for context retention and knowledge persistence across tasks. It automates development workflows via pre- and post-operation hooks, providing seamless coordination, code formatting, validation, and performance optimization. -
12
Microsoft Defender for Cloud
Welcome to the Microsoft Defender for Cloud community repository
Microsoft Defender for Cloud (the community repository) is a centralized collection of programmatic automations, policy definitions, remediation scripts, and visualization workbooks designed to help organizations manage and operationalize Microsoft Defender for Cloud at scale. It packages ready-to-use Azure Policy definitions, Logic App templates, PowerShell automation, remediation actions, and custom workbooks so teams can deploy detections, enforce security posture, and automate responses across subscriptions and tenants. The repo includes playbooks and examples for translating recommendations into automated remediation, along with onboarding and deployment artifacts (including Terraform helpers) to simplify large-scale rollout. Content is explicitly presented as community-driven: contributors can submit Logic Apps, policies, and scripts, and the project documents contribution guidelines and CLA requirements for submissions. -
13
MultiPoolMiner
Multi-algo, multi-pool, multi-device controller
Monitors crypto mining pools and coins in real-time and finds the most profitable for your machine. Simply edit a batch file with your Bitcoin address or username and start mining. You will start earning even during benchmarking! MultiPoolMiner is more profitable than Nicehash Miner 2 and Nicehash Miner Legacy as it uses direct pool mining. With less than 0.7% minimum fee. It supports a great number of mining pools, such as CryptoNight, Ethash, Equihash, Groestl, Keccak, Lyra2RE2, Lyra2z, MyriadGroestl, NeoScrypt, Quark, Qubit, Scrypt, SHA256, Skein, X11, and Yescrypt. Some pools overestimate the projected profits. By default MPM will reduce the projected algo price by a correction factor (actual_last24h / estimate_last24h) to counter the pool overestimated prices. MPM supports customized configuration via config files. -
14
Scoop (un)installer
Next-generation Scoop (un)installer
Scoop (un)installer is the official installer and uninstaller script system for Scoop, designed to make Scoop setup reliable, configurable, and repeatable across different Windows environments. Instead of being “just a one-liner,” it supports a full parameterized workflow where you can choose custom install directories, set global app locations, and control how networking is handled during installation. It is meant to run from PowerShell with appropriate execution policy and language mode, and it encourages running as a standard user by default for safer installs. When advanced needs come up, the project documents how to download and run the installer script locally with explicit flags, which is helpful for locked-down machines or when you need deterministic behavior. It also includes guidance for CI environments, where Scoop is often used to bootstrap toolchains, and it emphasizes returning a proper exit code so pipelines can fail fast and clearly. -
15
Scoop Extras
The Extras bucket for Scoop
Scoop «Extras» is the community-maintained bucket of additional manifests for Scoop, the popular Windows command-line installer; it contains packages and app manifests that don’t fit the stricter criteria of the main Scoop bucket. The repository is organized as a large collection of individual manifest files, helper scripts, and tooling to validate and publish new manifests, and it’s intended so users can extend Scoop with many community-contributed applications. Installation is straightforward for Scoop users: add the bucket with scoop bucket add extras and then install any manifest with scoop install <manifest>, making it quick to access a wide range of Windows command-line and GUI tools. The Extras bucket is actively maintained by a large contributor community, carries thousands of commits and many contributors, and uses an Unlicense license so manifests are easy to reuse. -
16
Sysmon-Modular
A repository of sysmon configuration modules
sysmon-modular is a community-driven repository that provides a modular, production-ready set of Sysmon configuration modules designed to be easily composed and tuned for different environments. The project organizes detection logic into per-event modules (for example, process creation, file create, network connection, registry events, image load, and many more) so operators can pick and choose which rules to enable without editing a monolithic XML by hand. It includes pre-generated configuration variants (balanced, default with FileDelete, verbose, super-verbose, and a Microsoft Defender for Endpoint augmentation) to cover common use cases while warning about the performance tradeoffs of very verbose settings. The repo ships helper tooling (PowerShell and Python scripts) to merge selected modules into a final sysmonconfig.xml, automating CI builds and allowing repeatable config generation. -
17
Windows Developer Config
Automate the setup and configuration of your Windows environment
WindowsDeveloperConfig is a Microsoft repository for automating Windows development environment setup. It provides declarative, CI-tested configurations that can turn a fresh Windows 11 installation into a ready-to-use developer workstation. The project supports a full Windows Dev Config path, a WSL Comfort path, and smaller single-language workload setups. The full setup installs development tools, applies opinionated Windows settings, configures terminal defaults, and bootstraps WSL with Ubuntu. WSL Comfort focuses on a polished Windows and Linux shell experience with optional shells, prompts, modern CLI tools, Git defaults, clipboard helpers, and themed terminal profiles. The repository is useful for developers who want reproducible machine setup, faster onboarding, and consistent workstation configuration across devices. -
18
Winfetch
A command-line system information utility written in PowerShell
Winfetch is a PowerShell‑based, command-line system information utility for Windows, inspired by tools like Neofetch. It displays OS, hardware, and installed software data alongside ASCII or logo art, optimized for aesthetic screenshots or user status displays. Highly customizable with minimal footprint, it’s ideal for personalization and visual system summaries. -
19
VHD2ISO
VHD to ISO converter
This tool convert a virtual haddisk to an bootable iso file. -
20
Agent Framework
Framework for building, orchestrating, and deploying AI agents
Microsoft Agent Framework is an open source framework designed to help developers build, orchestrate, and deploy AI agents and multi-agent systems. It provides a unified programming model that supports both Python and .NET implementations, allowing developers to create agent-driven applications in multiple programming environments. It includes tools and abstractions for constructing simple conversational agents as well as complex workflows where multiple agents collaborate to complete tasks. Microsoft Agent Framework supports graph-based orchestration that enables developers to connect agents, functions, and tools into structured workflows capable of handling multi-step processes. It also includes components such as agent sessions for managing state, context providers for maintaining memory, and middleware for intercepting and extending agent behavior. Developers can integrate external tools and services so that agents can execute actions beyond text generation. -
21
AutomatedLab
Framework that lets you deploy complex labs on HyperV and Azure
AutomatedLab is a provisioning solution and framework that lets you deploy complex labs on HyperV and Azure with simple PowerShell scripts. It supports all Windows operating systems from 2008 R2 to 2019, some Linux distributions and various products like AD, Exchange, PKI, IIS, etc. AutomatedLab (AL) enables you to setup test and lab environments on Hyper-v or Azure with multiple products or just a single VM in a very short time. There are only two requirements you need to make sure: You need the DVD ISO images and a Hyper-V host or an Azure subscription. Requires Windows Management Framework 5+ (Windows). Requires Intel VT-x or AMD/V capable CPU, a decent amount of RAM, and low-latency high-throughput storage (No spinning disks please, as there are issues related to them). This solution supports setting up virtual machines with Windows 7, 2008 R2, 8 / 8.1 and 2012 / 2012 R2, 10 / 2016, 2019, and SQL Server 2008, 2008R2, 2012, 2014, 2016, 2017, 2019. -
22
BadBlood
Flls Microsoft Active Directory Domain with a structure
BadBlood is a PowerShell toolkit that programmatically populates a Microsoft Active Directory domain with a realistic, large-scale structure of OUs, users, groups, computers, and permissions so defenders and testers can practice discovery, hardening, and incident response on a lifelike environment. It intentionally randomizes its output on every run so the created domain, objects, and ACL relationships are different each time, which helps teams exercise tooling and detection logic against varied scenarios. The project is driven by a single entry script (Invoke-BadBlood.ps1) and a collection of modular components that create OUs, seed users and groups, set ACLs, configure LAPS scenarios, and generate other attack/defense artifacts for lab use. Because it modifies a real AD forest, BadBlood requires high privileges (Domain Admin and Schema Admin) to run and the README warns strongly that it is not responsible for cleanup if used in production. -
23
BloodHound
Six Degrees of Domain Admin
BloodHound is a single-page Javascript web application, built on top of Linkurious, compiled with Electron, with a Neo4j database fed by a C# data collector. BloodHound uses graph theory to reveal the hidden and often unintended relationships within an Active Directory or Azure environment. Attackers can use BloodHound to easily identify highly complex attack paths that would otherwise be impossible to quickly identify. Defenders can use BloodHound to identify and eliminate those same attack paths. Both blue and red teams can use BloodHound to easily gain a deeper understanding of privilege relationships in an Active Directory or Azure environment. BloodHound Enterprise is an Attack Path Management solution that continuously maps and quantifies Active Directory Attack Paths. You can remove millions, even billions of Attack Paths within your existing architecture and eliminate the attacker’s easiest, most reliable, and most attractive techniques. -
24
DeepBlueCLI
PowerShell Module for Threat Hunting via Windows Event Logs
DeepBlueCLI is a PowerShell-centric threat-hunting toolkit built to extract, normalize, and flag suspicious activity from Windows event logs and Sysmon telemetry. It parses common sources—including Windows Security, System, Application, PowerShell logs, and Sysmon event ID 1—then applies a rich set of detection heuristics for things like suspicious account changes, password guessing and spraying, service tampering, PowerShell obfuscation and download-string usage, long or unusual command lines, and credential dumping attempts. Output is emitted as native PowerShell objects so analysts can pipe results to CSV, JSON, HTML, GridView, or custom pipelines for further triage and reporting. The codebase includes helpers for command-line decoding and de-obfuscation (automatic base64/deflate handling), safelisting/hash workflows (DeepBlueHash), and sample EVTX files so teams can test the tool on realistic attack traces. -
25
Domain Password Spray
A tool written in PowerShell to perform password assessments
DomainPasswordSpray is a focused security tool designed to perform enterprise-scale password spraying assessments against Active Directory environments. It automates the process of attempting common or customized passwords against many accounts while respecting timing and throttling controls to reduce obvious lockout noise. The project includes features for credential list management, target selection (users, service accounts, or collections), and configurable rate limits so testers can tune the balance between coverage and stealth. Output formats include summary reports and structured logs to help analysts triage which accounts were hit and where to prioritize defensive follow-up. The codebase is written to be used by penetration testers, red teams, and security assessors in authorized engagements and emphasizes responsible use; the README explicitly warns against unauthorized use and stresses running tests only with permission.
