PowerShell project architecture examples
Interactive architecture diagrams of 202 open-source PowerShell repositories with a GitDiagram architecture diagram, most stars first. Each diagram shows the project's main components, how they connect, and links every part to its file on GitHub.
Across the 32 most-starred PowerShell projects here, the median diagram has 18 components. 41% draw a data store, 22% have a command-line interface and 6% a web interface.
19% have a plugin or extension system.
Repositories 1–50 of 202
christitustech/winutil★ 62.8k
WinUtil is an administrator-run PowerShell utility for provisioning and repairing Windows: application installation/removal, debloat and preference tweaks, optional Windows…
raphire/win11debloat★ 44.6k
- This is a Windows 11 “debloat/customization” tool implemented as a PowerShell application, not a service or web app.
zhaoxuya520/reverse-skill★ 39.8k
reverse-skill is a client-neutral cybersecurity skills router, with a separate Burp MCP adapter.
cmderdev/cmder★ 27k
Cmder packages a portable Windows console experience around the ConEmu terminal, with configurable shell tasks, profile customization, and optional user-provided tools.
scoopinstaller/scoop★ 24.8k
Scoop is a Windows command-line app installer.
spotx-official/spotx★ 23.2k
SpotX is a Windows Spotify desktop patcher, with companion client-side helpers for filtering home-feed content and reporting listening history.
dotnet/core★ 22k
This repository is a .NET release-information hub.
sycnex/windows10debloater★ 18.8k
This is an open-source PowerShell utility suite for “debloating” Windows 10.
yerongai/office-tool★ 14.4k
Office Tool Plus is a Windows Office deployment and management tool.
actions/runner-images★ 13.5k
This repository provides source for VM images used by GitHub-hosted Actions runners and Microsoft-hosted Azure Pipelines agents.
powershellmafia/powersploit★ 13.1k
PowerSploit is a PowerShell penetration-testing toolkit; the README describes capabilities across execution, script modification, persistence, exfiltration, reconnaissance, and…
microsoft/sql-server-samples★ 11.2k
This repository is a curated collection of SQL Server, Azure SQL Database, Azure Synapse, and Azure SQL Edge samples rather than one deployable application.
specterops/bloodhound-legacy★ 10.6k
BloodHound Legacy is an Electron desktop application for exploring Active Directory and Azure relationship graphs and identifying attack paths.
samratashok/nishang★ 9.8k
This is an offensive-security framework implemented as a PowerShell module plus a directory of standalone scripts.
farag2/sophia-script-for-windows★ 9.8k
Sophia Script for Windows is a PowerShell toolkit for interactively configuring and restoring Windows settings across supported Windows editions, architectures, and PowerShell…
mandiant/flare-vm★ 8.5k
FLARE-VM is an open-source, script-driven provisioning tool whose sole purpose is to automate the build and configuration of a Windows-based reverse-engineering VM.
orange-cyberdefense/goad★ 8.3k
GOAD is a command-line orchestrator for building vulnerable Active Directory practice labs.
jenkinsci/docker★ 7.5k
1. This repository builds and ships the official jenkins/jenkins container images.
w4rh4wk/debloat-windows-10★ 6.2k
This is an open-source, CLI-based Windows system-administration tool (“Debloat Windows 10”).
hak5/usbrubberducky-payloads★ 5.6k
Repository Core: This includes the common “root” of the repository with general documents such as README.md, CONTRIBUTING.md, and GitHub configuration files (in .github).
bc-security/empire★ 5.1k
Empire Server – The heart of the framework, written in Python. It includes service layers, APIs, core functionalities, and modules.
0xsyr0/oscp★ 3.9k
This repository is an OSCP study cheat sheet and companion collection of exploit examples and practical resources, not an integrated pentesting application.
omerbsezer/fast-kubernetes★ 3.8k
Fast-Kubernetes is a documentation-and-lab repository for learning Kubernetes concepts through concise guides and runnable manifest examples.
s3cur3th1ssh1t/winpwn★ 3.7k
WinPwn is a Windows PowerShell penetration-testing toolkit.
fleschutz/powershell★ 3.3k
This repository is primarily a collection of stand-alone PowerShell scripts, with an optional Python desktop launcher.
pbatard/fido★ 2.9k
Fido is a single-script PowerShell utility for resolving official Microsoft Windows retail ISO downloads, usable through a GUI or command line, and for accessing bootable UEFI…
dataplat/dbatools★ 2.7k
The system should be represented as a modular PowerShell framework with these key components.
cisagov/scubagear★ 2.7k
ScubaGear assesses Microsoft 365 tenants against CISA SCuBA baselines.
cloud-architekt/azuread-attack-defense★ 2.6k
This repository is a static Microsoft Entra ID attack-and-defense playbook, not an executable service.
microsoft365dsc/microsoft365dsc★ 2.4k
Microsoft365DSC automates Microsoft 365 deployment, export, comparison, reporting, and drift monitoring through PowerShell DSC executed by an LCM.
romanitho/winget-autoupdate★ 2k
Winget-AutoUpdate (WAU) is a Windows application updater that uses winget to update installed apps, with configurable scheduling, app selection, and user notifications.
This repository is a meta-repository for Claude Code Agent Skills that delegate coding work to external model CLIs.
microsoftdocs/architecture-center★ 2k
Azure Architecture Center is a documentation product: readers explore cloud architecture guidance, patterns, and example scenarios.
This repository provides Azure Landing Zones (Enterprise-Scale) reference implementations: prescriptive, modular infrastructure-as-code for establishing a multi-subscription…
azure/microsoft-defender-for-cloud★ 1.9k
This is a community automation catalog for operating Microsoft Defender for Cloud (MDC) at scale, not a single deployable application.
micke-k/intunemanagement★ 1.9k
This is a Windows desktop application built in PowerShell with a WPF front-end.
otrf/security-datasets★ 1.8k
Security Datasets is a portable security-event dataset library for threat research, adversary simulation, analytics development, and detection validation.
microsoft/ari★ 1.7k
ARI is a PowerShell module for read-only Azure environment inventory, producing Excel reports and interactive diagrams.
windos/burnttoast★ 1.7k
BurntToast is an open-source PowerShell module/library for constructing and displaying Windows 10/Server 2019 toast notifications from scripts.
gerenios/aadinternals★ 1.6k
AADInternals is an open-source PowerShell module/CLI toolkit for administering Azure AD and Office 365.
psake/psake★ 1.6k
Build Automation Engine: This is the core engine implemented in PowerShell. It mainly resides in the src folder.
oschwartz10612/poppler-windows★ 1.6k
This repository distributes prebuilt Poppler for Windows; it does not build Poppler itself.
skiptotheendpoint/openintunebaseline★ 1.5k
OpenIntuneBaseline is a repository of security and configuration policy artifacts for Windows, Windows 365, macOS, and BYOD—not a runtime service.
sharepoint/sp-dev-docs★ 1.4k
61106960/adpeas★ 1.4k
irzyxa/volume2★ 1.3k
silverhack/monkey365★ 1.3k
Counted over GitDiagram's stored diagrams of public repositories, from the names their components and groups carry and the files they link to; the rules are the ones in the 2026 open-source architecture report. Stars are GitHub's when the diagram was last made. Rebuilt daily: hubs grow as more repositories' languages are known.