Wintuner
WinTuner is a tool that lets you take any WinGet app and upload it to Intune in minutes. It automates downloading the installer and logo, generates the intunewin package, creates the required deployment script details, and publishes the app to Intune. It also ships a PowerShell module for automation and includes documentation to guide you through the process.
Security Analysis
50 files scanned on Jan 8, 2026
Overall assessment: The codebase does not exhibit obfuscated or malicious payloads (no base64/obfuscation found) and does not contain obvious remote code execution or data exfiltration mechanisms built into runtime paths. However, there are security-sensitive patterns worth addressing: (1) a build-time secret placeholder that must be replaced before release, (2) in-memory/API key handling in the proxy client authentication, (3) remote binary downloads without explicit integrity checks in tests/workflows, and (4) token handling in the static authentication provider. These should be reviewed and hardened to prevent secret leakage and supply-chain risks. Admin tooling usage is expected; issues flagged are concerns for secure configuration and secret management, not a dismissal of legitimate admin capabilities.
You might also like
IntunePrepTool
A PowerShell GUI tool for streamlining application packaging for Microsoft Intune. Supports MSI, MSIX, EXE, PowerShell scripts, Winget, Chocolatey, and scheduled tasks. Features automatic script generation, direct Intune upload, registry modifications, shortcuts, and AI-assisted configuration via Azure OpenAI GPT-4.
Intune-App-Sandbox
Intune-App-Sandbox is a testing utility for PowerShell-based installers packaged with the Win32 Content Prep Tool for Intune deployments. It creates a sandbox workspace (C:\SandboxEnvironment), and adds context-menu options to pack with IntunewinUtil or run tests in a Safe sandbox. It also supports a detection-based test flow and a reusable template script to accelerate building and validating packaging for Win32 apps in Intune.
AutomaTuner
A Python tool that automates packaging and deploying applications from the Winget repository into Microsoft Intune using WinTuner. Features automated packaging, direct publishing, dependency handling, duplicate detection, and report generation with Azure AD authentication.
IntuneWin32App
A PowerShell module for managing the complete lifecycle of Win32 applications in Microsoft Intune. Features 40+ functions for packaging, publishing, detection rules, requirement rules, assignments, dependencies, and supersedence with support for x64, x86, and ARM64 architectures.
