p0wnedShell

p0wnedShell is a Windows C# executable that hosts a PowerShell/.NET runspace instead of launching powershell.exe. Version 2.6 provides an interactive post-exploitation menu with PowerSploit, Mimikatz, Active Directory enumeration, privilege-escalation, reflective PE loading, lateral-movement, and remote-execution modules. Optional compile-time AutoMasq settings alter in-memory process metadata; the -parent option starts a child with a selected running parent process.