Open Source PowerShell Software for Windows
Sort By:
PowerShell Software for Windows
View 26157 business solutionsBrowse free open source PowerShell Software for Windows and projects below. Use the toggles on the left to filter open source PowerShell Software for Windows by OS, license, language, programming language, and project status.
-
AI-generated apps that pass security reviewRetool lets you generate dashboards, admin panels, and workflows directly on your data. Type something like “Build me a revenue dashboard on my Stripe data” and get a working app with security, permissions, and compliance built in from day one. Whether on our cloud or self-hosted, create the internal software your team needs without compromising enterprise standards or control.
-
Find Hidden Risks in Windows Task SchedulerWindows Task Scheduler might be hiding critical failures. Download the free JAMS diagnostic tool to uncover problems before they impact production—get a color-coded risk report with clear remediation steps in minutes.
-
1
Atlas OS
An open and lightweight modification to Windows
Atlas is an open-source, script-based modification for Windows that enhances usability, privacy, and performance. It strips unnecessary background services, disables telemetry, and includes gaming and latency optimizations to make Windows feel lean and fast for enthusiasts. -
2
WinUtil
Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes
WinUtil by Chris Titus Tech is a comprehensive Windows utility script designed to automate system maintenance, streamline software installations, and apply performance tweaks. It focuses on debloating Windows, fixing update issues, and configuring various system optimizations to enhance user experience. The tool requires running PowerShell with administrator privileges to perform system-wide changes safely and effectively. WinUtil is modular and maintained as multiple scripts compiled into a single executable PowerShell script for ease of use and development. It offers a robust developer workflow with clear contribution guidelines and an active Discord community for support. The project prioritizes clean, efficient code and careful review of contributions to maintain stability. WinUtil is widely popular with thousands of stars and contributors, reflecting its reliability and usefulness in Windows system management. -
3
Office Tool Plus
Office Tool Plus localization projects
Office Tool Plus is a Windows deployment assistant for managing installation and activation of Microsoft Office, Visio, and Project (2016 through 2024). It provides a GUI for customizing installs, applying licenses, and managing components for offline and network environments. -
4
Tiny 11 Releases
Automated tools for creating streamlined Windows 11 images with CI/CD.
Tiny11 Automated Builder: Build Tiny11, Build Tiny11 Core and Build Nano11 Automated tools for creating streamlined Windows 11 images with CI/CD support. 📋 Overview Tiny11 Automated Builder provides PowerShell scripts to create minimized Windows 11 ISO images by removing bloatware, disabling telemetry, and optimizing system components. -
Enterprise-grade ITSM, for every businessFreshservice is an intuitive, AI-powered platform that helps IT, operations, and business teams deliver exceptional service without the usual complexity. Automate repetitive tasks, resolve issues faster, and provide seamless support across the organization. From managing incidents and assets to driving smarter decisions, Freshservice makes it easy to stay efficient and scale with confidence.
-
5
Windows Defender Remover
A tool which is uses to remove Windows Defender
This is a command‑line tool and executable that fully disables or removes Microsoft Defender and associated Windows security components. It disables the Windows Security App, SmartScreen, Virtualization-Based Security (VBS), UAC, and other built‑in protections on Windows 8.x through Windows 11, effectively removing the antivirus and security UI from the system. -
6
Win11Debloat
A simple, easy to use PowerShell script to remove pre-installed apps
Win11Debloat is a Windows 10/11 PowerShell toolkit designed to streamline and automate the 'debloating' process—removing unwanted preinstalled apps, disabling telemetry, and tweaking system settings. It supports both interactive and silent modes and is popular among sysadmins and privacy-focused users. -
7
tiny11builder
Scripts to build a trimmed-down Windows 11 image
Scripts to build a trimmed-down Windows 11 image - now in PowerShell. After more than a year (for which I am so sorry) of no updates, tiny11 builder is now a much more complete and flexible solution - one script fits all. Also, it is a steppingstone for an even more fleshed-out solution. You can now use it on ANY Windows 11 release (not just a specific build), as well as ANY language or architecture. This is made possible thanks to the much-improved scripting capabilities of PowerShell, compared to the older Batch release. This is a script created to automate the build of a streamlined Windows 11 image, similar to tiny11. My main goal is to use only Microsoft utilities like DISM, and no utilities from external sources. The only executable included is oscdimg.exe, which is provided in the Windows ADK and it is used to create bootable ISO images. Also included is an unattended answer file, which is used to bypass the Microsoft Account on OOBE and to deploy the image. -
8
FLARE VM
A collection of software installations scripts for Windows systems
FLARE VM is a security-focused Windows workstation distribution designed for malware analysis, reverse engineering, penetration testing, and threat hunting. It bundles a curated set of tools—disassemblers, debuggers, decompilers, virtualization, forensics utilities, packet capture tools, exploit frameworks, and hex editors—preconfigured to work together. The environment configures paths, dependencies, environment variables, and common tool integrations so analysts can focus on tasks rather than setup. Updates and modular installation let users include only the tools that match their workflow, keeping the VM lean and current. Because security toolchains often clash (DLL versions, signing, privileges), FLARE VM’s packaging handles compatibility issues ahead of time. For investigations involving malware unpacking, sandboxing, static analysis, or code reversing on Windows, the platform dramatically accelerates readiness and consistency across analysts. -
9
CoreCycler
Script to test single core stability
A PowerShell script to test the stability of single-core loads. Modern CPUs can adjust their CPU frequency depending on their load, and have mechanisms that allow them to clock higher. With this script, you can test the stability for each core, which helps you to validate if your Ryzen "PBO" resp. "Curve Optimizer" settings are actually stable. It also works to test Intel's "Active-Core" Turbo-Boost settings. -
Gen AI apps are built with MongoDB AtlasMongoDB Atlas provides built-in vector search and a flexible document model so developers can build, scale, and run gen AI apps without stitching together multiple databases. From LLM integration to semantic search, Atlas simplifies your AI architecture—and it’s free to get started.
-
10
Remove Windows Ai
Strip Windows 11 of built-in AI features for control and privacy
RemoveWindowsAI is an open source PowerShell-based tool created to help users regain control over their Windows 11 experience by disabling or removing AI-related features that Microsoft has increasingly integrated into the OS. It’s designed to work with currently released, stable versions of Windows 11 and continuously updated to match newly added AI components, especially since the 25H2 major update. The script covers a wide variety of AI surfaces (from core features like Copilot and Recall to hidden system packages, registry keys, and ancillary services) and applies targeted removals or disablement in bulk or selectively based on user choice. It offers both a graphical interface with toggles and a more advanced command-line mode, giving flexibility to novices and power users alike. RemoveWindowsAI also includes options to create backups and revert changes if users want to restore functionality later. -
11
SVG Explorer Extension
Extension module for Windows Explorer to render SVG thumbnails
The SVG Explorer Extension is a utility for Windows File Explorer that adds native thumbnail rendering and context-menu previews for SVG files. With this extension installed, Explorer will show scalable previews of .svg files just like image formats, enabling visual quick identification of vector files. The project also adds a “Preview in Windows Explorer” feature so users can see full-size SVGs in the side preview pane without launching an editor. It supports features like CSS-based styling, embedded fonts, and scaling in thumbnails so the preview matches rendering expectations. Because Windows doesn’t natively render SVG previews in many versions, this fills a usability gap for designers, developers, and content creators working with vector assets. The extension is lightweight, integrates into shell UI seamlessly, and improves file navigation workflows involving vectors. -
12
Vcpkg
C++ Library Manager for Windows, Linux, and MacOS
Vcpkg helps you manage C and C++ libraries on Windows, Linux and MacOS. This tool and ecosystem are constantly evolving, and we always appreciate contributions! After you've gotten vcpkg installed and working, you may wish to add tab completion to your shell. With CMake, you will still need to find_package and the like to use the libraries. Check out the CMake section for more information, including on using CMake with an IDE. In classic mode, vcpkg produces an "installed" tree, whose contents are changed by explicit calls to vcpkg install or vcpkg remove. The installed tree is intended for consumption by any number of projects: for example, installing a bunch of libraries and then using those libraries from Visual Studio, without additional configuration. Because the installed tree is not associated with an individual project, it's similar to tools like brew or apt, except that the installed tree is vcpkg-installation-local, rather than global to a system or user. -
13
Debloat Windows 10
A Collection of Scripts Which Disable/Remove Windows 10 Features
“Debloat-Windows-10” is a GitHub repository containing a collection of PowerShell scripts intended to disable or remove unwanted Windows 10 features, built-in apps, services, telemetry components, and tweaks for performance or privacy. The project is archived as of September 23, 2025 and marked as read-only, since Windows 10 will reach end of life. The author explicitly warns that running these scripts can sometimes break system functionality (e.g. user accounts or system components) and recommends using them only on fresh installations with caution. Many scripts operate nondestructively (without interactive confirmations), but the user is encouraged to edit them beforehand to suit their specific needs. The repository includes utilities to disable services, uninstall default apps, tweak privacy settings, clean up telemetry, and adjust system behavior. -
14
Magisk on WSA
Integrate Magisk root and Google Apps into WSA
MagiskOnWSALocal is an open source project by LSPosed that integrates Magisk root and Google Apps (GApps) into Windows Subsystem for Android (WSA). It automates the process of building customized WSA images with root access, replacing Amazon Appstore with Google Play services. The repository includes scripts that streamline setup across Linux distributions like Ubuntu, Debian, Arch, and openSUSE, supporting both ARM64 and x64 architectures. It offers features such as unattended installation, automatic developer mode activation, and seamless updates without data loss. This project has become popular among advanced users who want more control over Android on Windows. Note: support for Magisk on WSA will end after March 5, 2025. -
15
Claude Code
Claude Code is an agentic coding tool that lives in your terminal
Claude Code is an intelligent agentic coding assistant that lives in your terminal and understands your entire codebase. It helps developers code faster by executing routine tasks, explaining complex code snippets, and managing git workflows—all via natural language commands. Claude Code integrates seamlessly into your terminal, IDE, or GitHub by tagging @claude to interact with your code context. The tool is designed to simplify development by automating repetitive work and providing instant clarifications on code behavior. User feedback and usage data are collected responsibly, with strict privacy safeguards and limited retention, ensuring no feedback is used to train generative models. Claude Code is open and actively maintained with community-driven bug reporting and feature requests. Its natural language interface makes advanced coding workflows accessible without leaving your coding environment. -
16
Fido
A PowerShell script to download Windows or UEFI Shell ISOs
Fido is a PowerShell script that is primarily designed to be used in Rufus, but that can also be used in standalone fashion, and whose purpose is to automate access to the official Microsoft Windows retail ISO download links as well as provide convenient access to bootable UEFI Shell images. This script exists because, while Microsoft does make retail ISO download links freely and publicly available (at least for Windows 8 through Windows 11), up until recent releases, most of these links were only available after forcing users to jump through a lot of unwarranted hoops that created an exceedingly counterproductive, if not downright unfriendly, consumer experience, that greatly detracted from what people really want (direct access to ISO downloads). As to the reason one might want to download Windows retail ISOs, as opposed to the ISOs that are generated by Microsoft's own Media Creation Tool (MCT). -
17
SpotX
SpotX patcher used for patching the desktop version of Spotify
SpotX is a community-built Spotify desktop client patcher that blocks audio, video, and banner ads and unlocks premium-like features—such as unlimited skips and custom themes—on Windows, macOS, and Linux. It injects tweaks client-side to redefine the Spotify experience. -
18
Flipper Zero BadUSB
Repository for my flipper zero badUSB payloads
The repository is a public GitHub collection of BadUSB payloads prepared to run from a Flipper Zero device; it’s presented as a plug-and-play library that bundles payload scripts, a README, and supporting files so users can pick and use payloads without heavy setup. The project is heavily PowerShell-oriented and organized into a payloads folder with documentation (README, FAQs) and helper scripts, and the author says they formatted the collection to be easy for others to use. The maintainer also set up short-URL infrastructure to simplify embedding webhooks or tokens into compact one-liners for payload configuration, and the repo includes social/contact links and acknowledgments to related projects. The repository is actively used by a community (many stars, forks and hundreds of commits), and the author explicitly warns about responsible use and includes guidance in the docs. -
19
Scoop Installer
A command-line installer for Windows
Scoop is a command-line installer for Windows. If you have built software that you would like others to use, Scoop is an alternative to building an installer (like MSI or InnoSetup). You just need to compress your app to a .zip file and provide a JSON manifest that describes how to install it. Scoop downloads and manages packages in a portable way, keeping them neatly isolated in ~\scoop. It won't install files outside its home, and you can place a Scoop installation wherever you like. For terminal applications, Scoop creates shims, a kind of command-line shortcut, inside the ~\scoop\shims folder, which is accessible in the PATH. For graphical applications, Scoop creates program shortcuts in a dedicated Start menu folder, called 'Scoop Apps'. This way, packages are always cleanly uninstalled and you can be sure what tools are currently in your PATH and in your Start menu. -
20
Sophia Script for Windows
The most powerful PowerShell module for fine-tuning Windows
Sophia Script for Windows is a scripting environment or DSL (Domain-Specific Language) designed to provide scripting capabilities on Windows systems in a high-level, expressive way. It abstracts over native APIs and offers constructs that make system automation, file manipulation, registry access, and user scripting easier than raw PowerShell or batch scripts. The repository presumably contains runtime, script engine, and library helpers to simplify common Windows tasks (e.g., service control, UI automation, scheduled tasks). Because Windows scripting often involves glue between COM, WMI, and system APIs, Sophia’s design likely aims to unify those surfaces behind consistent semantics. For developers or sysadmins, it offers an alternative tool for building lightweight Windows automation without resorting to full compiled utilities. While its adoption might be niche, the project showcases how domain-specific scripting languages can simplify cross-cutting OS tasks. -
21
malware-samples
A collection of malware samples and relevant dissection information
This repo is a public collection of malware samples and related dissection/analysis information, maintained by InQuest. It gathers various kinds of malicious artifacts, executables, scripts, macros, obfuscated documents, etc., with metadata (e.g., VirusTotal reports), file carriers, and sample hashes. It’s intended for malware analysts/researchers to help study how malware works, how they are delivered, and how it evolves. -
22
UnattendedWinstall
Personalized Unattended Answer Files that helps debloat Windows 10
UnattendedWinstall is a collection of Microsoft Unattend XML answer files designed for customized, unattended Windows installations. It automates OS deployment, debloating, and configuration changes (like disabling telemetry, removing default apps, registry tweaks) during initial setup. Designed to streamline clean installs of Windows 10/11 with preconfigured preferences and optimizations. -
23
BadUSB
Flipper Zero badusb payload library
This project explores USB device emulation attacks—commonly called BadUSB—by demonstrating how commodity USB hardware can impersonate keyboards, network adapters, or storage devices to perform scripted actions on a host. It typically contains firmware examples, payloads, and explanations showing how a device presenting as a Human Interface Device (HID) can inject keystrokes, open shells, or orchestrate data exfiltration when plugged into a machine. The codebase is frequently intended for security research and defensive testing: defenders and red teams use it to validate endpoint controls, USB whitelisting, and user training. Due to the dual-use nature of such techniques, responsible repositories emphasize lab-only experiments, consent-based testing, and mitigations like disabling autorun, enforcing device policies, and using endpoint detection. -
24
Commando VM
Complete Mandiant Offensive VM (Commando VM)
Commando VM (by Mandiant) is a Windows-based offensive security / red-team distribution built to turn a fresh Windows installation into a fully featured penetration testing environment. It provides an automated installer (PowerShell script) that uses Chocolatey, Boxstarter, and MyGet package feeds to download, install, and configure dozens (100+ / 170+ depending on version) of offensive, fuzzing, enumeration, and exploitation tools. The idea is to spare testers the repetitive work of hand-installing dozens of windows tools, dependencies, and configurations. Commando VM supports customization of its installation profile (you can pick subsets of tools), includes support for WSL/Kali integration, and is intended to be used in a VM to facilitate snapshot recovery and test isolation. -
25
BloodHound Legacy
Six Degrees of Domain Admin
BloodHound Legacy is the deprecated open‑source version of the BloodHound Active Directory attack path analysis tool. It uses graph theory to model and visualize privileged relationships in AD, Entra ID, and Azure environments. Security professionals use it to enumerate domain privilege escalation paths, misconfigurations, and attack surfaces in corporate networks
