_ ReconLab
Commands  / Post-Exploitation  / PowerSploit

PowerSploit

PowerShell post-exploitation modules.

Windowshigh

pkg: powersploit

PowerSploit offers PowerShell scripts for code execution, persistence, recon, exfiltration and privilege escalation.

Syntax

Import-Module ; Invoke-{Module}

Example

powershell -ep bypass; Import-Module .\PowerSploit.psd1

Loads the toolkit to run modules like PowerUp for privesc.

Options & flags

What each switch does. Toggle them in the builder below to assemble a command.

Import-ModuleLoad the toolkit in PowerShell.
Invoke-PowerUpHunt for Windows privesc misconfigs.
Invoke-MimikatzRun Mimikatz in memory.
Get-NetUserPowerView AD user enumeration.

Command builder

Tick options (and fill any values) to build a ready-to-copy command.

powersploit

Usage examples

powershell -ep bypass -c "Import-Module .\PowerUp.ps1; Invoke-AllChecks"

Run all privesc checks.

Advantages
  • Native Windows tradecraft
  • PowerUp/PowerView staples
Disadvantages
  • Heavily AV/AMSI-flagged
  • Windows-only
Tags
#windows#powershell#post-ex

Official docs: PowerSploit ↗

Related commands

Mimikatz

Extract Windows credentials from memory.

WinPEAS

Windows privilege-escalation auditing tool.

Frequently asked questions

What is PowerSploit used for?
PowerSploit offers PowerShell scripts for code execution, persistence, recon, exfiltration and privilege escalation.
What is an example PowerSploit command?
A common example is: powershell -ep bypass; Import-Module .\PowerSploit.psd1 — Loads the toolkit to run modules like PowerUp for privesc.
Is PowerSploit part of a standard install?
PowerSploit runs on Windows. Install the powersploit package.
What category of security tool is PowerSploit?
PowerSploit is a Post-Exploitation tool with a high-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →