Open Source PowerShell Software Testing Tools

Nishang is a framework and collection of scripts and payloads which enables usage of PowerShell for offensive security, penetration testing and red teaming. Nishang is useful during all phases of penetration testing. Import all the scripts in the current PowerShell session (PowerShell v3 onwards). Use the individual scripts with dot sourcing. Note that the help is available for the function loaded after running the script and not the script itself since version 0.3.8. In all cases, the function name is same as the script name. Nishang scripts are flagged by many Anti Viruses as malicious. The scrripts on a target are meant to be used in memory which is very easy to do with PowerShell. Two basic methods to execute PowerShell scripts in memory. Use the in-memory dowload and execute: Use below command to execute a PowerShell script from a remote shell, meterpreter native shell, a web shell etc. and the function exported by it.

The package 'epyunit' provides extensions for PyUnit and PyDev. * Extensions for PyUnit - Unittests for arbitrary executables. * Extensions for PyDev - Automation of search and load of pydevd.py The extensions are applicable from commandline and/or within Eclipse. Online manuals: - https://pythonhosted.org/epyunit/ PyPi repository: - https://pypi.python.org/pypi/epyunit Current application examples are: - bash-core - http://bash-core.sourceforge.net Nickname - Dromi https://en.wikipedia.org/wiki/Dromi

Testimo is a PowerShell module aimed at running health and configuration checks for Active Directory environments. It aggregates many different tests (connectivity, features enabled, policies configured, roles/failover status, DNS settings, password complexity etc.), to give administrators a summary of health, security posture, compliance, etc. It’s designed both for basic/ad hoc checks and more advanced auditing. Currently works under Windows PowerShell (not yet fully supported in PowerShell Core / version 7) due to dependencies on other Microsoft modules.