AI Summary: Pentest-Windows11 v3.2 is a Windows penetration testing environment tailored for deployment on Mac M series chips and other platforms, integrating over 400 commonly used security tools and scripts. Notable features include support for multiple virtualization formats (VMware, Parallels Desktop, Hyper-V), optimized tool management, and a user-friendly interface, enabling efficient vulnerability assessment and penetration testing workflows. The environment is designed to be ready-to-use, allowing security professionals to conduct testing with minimal setup.

README

Pentest-Windows11 v3.2

The First Windows Penetration Testing Environment on Mac M Chips

中文文档 | English README

📖 Project Overview

📝 System Introduction

• This environment aims to provide a ready-to-use Windows penetration testing environment.
• Reposting is welcome. Please indicate the original author and link: https://github.com/arch3rPro/Pentest-Windows
• Recommended environment: [VMware: 17.0] / [RAM: 8G] / [VM Disk: 100G] / [Actual disk usage: about 30G]
• System account: admin, password: 123456. Please change the password after login!
• Chinese name: 矛·盾 武器库, meaning that cybersecurity is both offense and defense, with the sharpest spear and the strongest shield, interdependent and competitively evolving.
• The project has integrated 400+ commonly used tools and scripts. You can submit tool requests in the pinned Issue.

🚀 VM Download

Release status:

• Mac M series Arm64 Fusion version v3.0
• Mac M series Arm64 Parallels Desktop version v3.1
• Windows/Mac Intel x64 VMware version v3.2
• KVM/PromoxVE Qcow2 version v3.2
• Hyper-V and Ventoy bootable physical machine version v3.2
• VirtualBox OVF version (in progress)

Download Link：

1. Parallels Desktop

• VM Version: Mac M series Arm64 Parallels Desktop version
• Filename: Windows11 Penetration Suite Toolkit v3.1-Arm-PD.7z
• Cloud Storage: Mega
• Share Link: https://mega.nz/file/Mrxx1a6A#mt231OfG8qaCisenyCOWboZymY5XIt7rxySti5rL2i4
• Share Code: None
• SHA256: 47E5B3EAFEB9E28C5ECA6C5A381D35206475C7C5F42CE46C5B0D41E749AAE6C7

2. VMware version

• VM Version: Windows/Mac Intel x64 VMware version v3.2
• Filename: Windows11 Penetration Suite Toolkit v3.2-x64-VMware.7z
• Cloud Storage: Mega
• Share Link: https://mega.nz/file/gio02Sha#eVqEQU814nubdrQOasERqQAfyhZ1e1TjhvxdkuDzt6I
• Share Code: None
• SHA-256: 3E86BCE3950521EAC112CDA840B79012614AE456A621C174F43608E58DEBFE93

✨ Version Introduction

Main Features & Update History:

• v3.2 (Latest):
  • Supports x64 architecture (VMware | PVE-KVM)
  • Supports Mac M series Arm architecture (Fusion | Parallels Desktop)
  • Supports Hyper-V and Ventoy bootable version (can be installed to external hard drive, run on any host, no VM required)
  • Optimized graphical bat tool startup, added vbs no CMD popup startup.
  • KVM VM has QGA and VirtualIO drivers installed, adapted for ProxmoxVE, ready to use after import (RDP recommended).
  • Added UniGetUI management, supports graphical update of scoop-installed tools and software.
  • VirtualBox version in progress.
• v3.1:
  • Based on official Windows 11 ARM ISO.
  • Chrome tab management added, project tool links imported.
  • Maye toolkit categories and subcategories beautified with emoji.
  • v3.1 PD version removed TPM restriction, VM not encrypted.
  • Added basic PD VM download Windows 11-Optimization.PD.7z
• v3.0:
  • Added tools for internal penetration, credential acquisition, VPN, etc. Total tools increased to 360+.
  • Toolbox uses new Maya Lite version, supports subcategories, clearer classification.
  • All tools in the toolbox have comments, mouse hover shows description.
  • Due to Windows 11 TPM policy, VM is encrypted, password: 123456789.
• General Features (v2.x - v3.x):
  • Streamlined built-in software, beautified terminal fonts and some icons, moderate optimization.
  • System disk image 100GB, single disk file storage for performance (image size continuously optimized).
  • Rebuilt tool icons, each tool has a corresponding icon.
  • Integrated Scoop package manager (v2.1+), supports scoop update <tool> for updates.
  • Scoop supports script tool installation and updates (v2.2+).
  • Windows Terminal optimized, unified theme and oh-my-posh enhancement.
  • Updated Scoop environment variables, CLI tools can be used directly in CMD or Powershell.
  • Removed some unmaintained or rarely used tools.
  • WSL temporarily removed (low usage, large space, ARM version not supported), may be added later as needed.

ℹ️ Additional Information

• For the full list of supported tools and updates, please check https://github.com/arch3rPro/scoop-bucket.
• Some machines do not support nested virtualization or may conflict with local Hyper-V installation. Please use the NoWSL lite version if you do not need Kali-WSL.
• Tools are in their initial installation state by default. Some tools require initialization, and a few need manual plugin configuration.

📜 Production Statement

1. All installable software is downloaded from the official website or GitHub.
2. All portable (green) software is downloaded from Guohe Shell (https://www.ghxi.com/).
3. All script tools are downloaded from GitHub.
4. Some licensed (cracked) and excellent penetration tools are shared from WeChat public accounts.
5. Some personal information may remain due to debugging; please ignore it.
6. This project does not and will never accept any form of sponsorship.

⚠️ Disclaimer

1. This image is only for legally authorized enterprise security construction. If you want to test its usability, please set up your own target environment.
2. When using this image for testing, ensure your actions comply with local laws and have sufficient authorization.
3. Any illegal use is at your own risk. The author assumes no legal or joint liability.

💻 System Introduction

🖥️ Basics

• 🪟: Managed and installed by scoop, supports one-click install and update.
• 🌐: Online security tools, require internet access, some need VPN/proxy.
• 📖: Offline knowledge base, including password dictionaries, tool usage, exploit tutorials, AV bypass guides (PDF/Markdown).

⌨️ Programming & IDEs

• Python v3.10.11 (D:/Base/apps/Python310)
• Python v2.7.18 (D:/Base/apps/Python27)
• JRE v1.8.0_381 (D:/Base/apps/liberica17-jre/current/bin)
• Perl v5.36.1 (D:/Base/apps/git/current/usr/bin/perl.exe)
• Ruby v3.2.2
• TDM-gcc v10.3.0 (D:/Base/apps/tdm-gcc)
• Laragon v5.0.0 (D:/Base/apps/laragon)
  • Nginx v1.14.0
  • Apache v2.4.43
  • PHP v5.4.9
  • MySQL v5.1.72
• Git v2.41.0 (D:/Base/apps/git)
• Curl v8.1.1 (D:/Base/apps/Curl/bin)
• Wget v1.21.4 (D:/Base/apps/Wget)
• Scoop: Windows package manager v0.3.1 (D:/Base/apps/scoop)

⚓ Common Software

System Enhancement:

• 7zip: High-compression open-source archiver 🪟
• utools: Multi-functional file search launcher 🪟
• Windows Terminal: (replaces default cmd)
• VMware: VMware Tools for VM performance and management
• Oh-My-Posh: Cross-platform terminal prompt customization 🪟
• Clink: Bash-style command line editing for Windows Cmd.exe (D:/Base/apps/Clink) 🪟
• SublimeText: Efficient text editor, Chinese version v4.4150 (Guohe Shell)

System Optimization:

• Dism++: Windows system management/optimization tool 🪟
• WiseCare365: System optimization tool, green version v6.5.1_Pro (Guohe Shell)
• Tools: Custom utilities
  • Context Menu Manager: One-click set WIN10/WIN11 context menu 💾
  • Autologin: Windows auto-login registry 💾
  • ClearHistory.ps1: Clear PowerShell history 💾

🔗 Maye Launcher

- Maye Lite: Fast Windows launcher, supports drag-and-drop, hotkeys, multi-column, lnk parsing
- icon: App icon collection, includes custom icons

🛠️ Penetration Tools Introduction

400+ commonly used scripts and GUI tools can be accessed via icons in the Maye toolbox.

• Default to launching CMD.exe with Windows Terminal
• Script startup directory is set
• Required dependencies are installed
• Scripts execute Help command on startup

🔬 Common Tools

⚡ System Optimization

♾️ Service Connection

💡 Information Gathering

🖥️ Host Discovery

📋 Domain Info Gathering

🪬 Comprehensive Recon Tools

🔬 Google Hacking

🗜️ Data Leak Check

🛸 Port Scanning

📡 Scanning Tools

🌐 Online Scanning

🌐 Cyber Space Engines

🌐 Online Search

🧭 Mapping Tools

✈️ Proxy & Packet Capture

🌀 Fingerprint Recognition

🌐 Online Recognition

👣 Fingerprint Tools

📦️ Webshell

📂 Directory Brute

🔐 Password Cracking

🪲 Vulnerability Scanning

🔎 Vulnerability Search

🌐 Online Search

🔍 Search Tools

🧿 Common Vulnerabilities

🛰️ XSS Scanning

💉 SQL Injection

🔫 Injection Related

🗂️ File Operations

♨️ Deserialization Exploitation

⚓ Database Exploitation

💎 Special Vulnerabilities

🗳️ Comprehensive OA Tools

🗃️ CMS Vulnerabilities

⚖️ Middleware Vulnerabilities

🔭 Other Vulnerability Exploitation

🛰️ Penetration Frameworks

🖱️ Persistence

🛂 AV Bypass & RAT

⌨️ Command Control

⌚ Privilege Escalation

🧰 Local Tools

🌐 Online Privilege Escalation

🚀 Tunnel Proxy

🛩️ Multi-level Proxy

🚇 Internal Tunnels

🏠 Internal Penetration

⚡ Internal Forwarding

🩺 Internal Scanning

⏳ Domain Penetration

📑 Credential Harvesting

🧲 VPN Network

System Screenshots

🌲 Tool Directory

🌐 Chrome Extensions

📡 Burpsuite/Metasploit

🛰️ Yakit

🛸 Goby