Complete Mandiant Offensive VM ("CommandoVM") is a comprehensive and customizable, Windows-based security distribution for penetration testing and red teaming. CommandoVM comes packaged with a variety of offensive tools not included in Kali Linux which highlight the effectiveness of Windows as an attack platform.
Insider Preview editions of Windows are not supported
Deploy a Windows Virtual Machine
You MUST disable Windows Defender for a smooth install. The best way to accomplish this is through Group Policy.
In Windows versions 1909 and higher, Tamper Protection was added. Tamper Protection must be disabled first, otherwise Group Policy settings are ignored.
Windows Security
in the search box)Tamper Protection
to Off
It is not necessary to change any other setting (
Real Time Protection
, etc.)
Important! Tamper Protection must be disabled before changing Group Policy settings.
To permanently disable Real Time Protection:
gpedit
in the search box)Turn off real-time protection
Make sure to reboot before making the next change
To permanently disable Microsoft Defender:
gpedit
in the search box)Turn off Microsoft Defender Antivirus
Set-ExecutionPolicy Unrestricted -force
cd ~/Downloads/commando-vm
Get-ChildItem .\ -Recurse | Unblock-File
.\install.ps1
for a GUI install or .\install.ps1 -cli
for command-lineSee the for more information.
This download configuration script is provided to assist penetration testers
in creating handy and versatile toolboxes for offensive engagements. It provides
a convenient interface for them to obtain a useful set of pentesting Tools directly
from their original sources. Installation and use of this script is subject to the
Apache 2.0 License.
You as a user of this script must review, accept and comply with the license
terms of each downloaded/installed package listed below. By proceeding with the
installation, you are accepting the license terms of each package, and
acknowledging that your use of each package will be subject to its respective
license terms.