By manipulating LSASS memory flags like UseLogonCredential and IsCredGuardEnabled, this repo demonstrates how Credential Guard can be bypassed—restoring cleartext credentials despite the protection appearing active. Requires SYSTEM-level access and targets VBS-based defenses.
☆15May 25, 2025Updated last year
Alternatives and similar repositories for CredentialGuardBypass
Users that are interested in CredentialGuardBypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Collection of Semgrep rules for security analysis☆10Mar 30, 2024Updated 2 years ago
- Chrome Dump Password☆12Nov 17, 2025Updated 11 months ago
- ☆23Jul 6, 2026Updated 3 months ago
- Enumerating EDR WhiteListed Processes☆12Jan 30, 2025Updated last year
- Nuclei templates for source code analysis. Detects hardcoded secrets, config leaks, debug endpoints. Also helps identify OWASP Top 10 iss…☆87Jun 11, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- FeedApp contains IOAs of attackers detected in services provided by InfinitumIT.☆11Updated this week
- ☆16Sep 29, 2024Updated 2 years ago
- Submit Burp Suite extensions and updates to the BApp Store.☆18Oct 16, 2026Updated 2 weeks ago
- Julia rules for semgrep☆13Dec 9, 2025Updated 10 months ago
- Uses WMI Event Win32_ModuleLoadTrace to monitor module loading. Provides filters, and detailed data. Has an option to monitor for CLR Inj…☆42May 9, 2019Updated 7 years ago
- Grab DPAPI-protected Wifi Passwords☆11Jun 28, 2021Updated 5 years ago
- Low Noise Semgrep Security Rules☆22Feb 6, 2025Updated last year
- ☆18Dec 20, 2025Updated 10 months ago
- Add a cat to your webpage!☆45Oct 9, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Small script for retrieving incoming transactions based on provided hour period.☆14Jan 24, 2022Updated 4 years ago
- Windows Event Log Killer☆11May 22, 2017Updated 9 years ago
- A collection of Semgrep rules which followed security guidelines for .NET and Java.☆24Oct 4, 2021Updated 5 years ago
- This is an Active Directory Pentesting Lab created by me which includes attacks like IPV6 DNS takeover, Smb relay, unconstrained delegati…☆24Jan 23, 2024Updated 2 years ago
- Windows Security Descriptor Definition Language (SDDL) parser and formatter☆20Jun 8, 2020Updated 6 years ago
- CSharp4Pentesters☆11Mar 5, 2022Updated 4 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- ☆12Apr 7, 2022Updated 4 years ago
- ollvm, based on llvm-clang 5.0.2, 6.0.1, 7.0.1, 8.0, 9.0, 9.0.1☆19Apr 4, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Apate performs anti-debugging, anti-VM and anti-sandbox tests, to see if your linux system is able to stay under the radar.☆13Apr 27, 2022Updated 4 years ago
- ☆17Aug 11, 2025Updated last year
- ☆21Jul 4, 2022Updated 4 years ago
- My Personal Kernel-Mode Process dumper☆14Feb 18, 2024Updated 2 years ago
- "Sucosh" is an automated Source Code vulnerability scanner and assessment framework for Python(Flask-Django) & NodeJs capable of performi…☆39May 20, 2024Updated 2 years ago
- My collection of Semgrep rules for vulnerability detection on source code (swift, java, cobol)☆44Dec 3, 2025Updated 10 months ago
- An ultra lightweight web screenshot tool with advanced DOM analysis features.☆48Updated this week
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆16Oct 19, 2025Updated last year
- RWX Section Abusing☆17Nov 19, 2023Updated 2 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Plugin for ida pro that copies RVA under cursor to clipboard.☆18Jul 28, 2023Updated 3 years ago
- A Simple heaptrack-compatible Heap Profiler for Windows C/C++ Applications☆12Jun 28, 2015Updated 11 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- This script will not work with the latest version of chrome☆17May 11, 2025Updated last year
- CryptnetURLCacheParser is a tool to parse CryptAPI cache files☆24Aug 3, 2024Updated 2 years ago
- Go library for compile-time code transformation☆12Dec 31, 2022Updated 3 years ago
- Misc Windows Driver/Kernel PoCs that do not need a separate repo.☆14May 4, 2025Updated last year