Alternatives and similar repositories for TrustedInstallerPOC:

Users that are interested in TrustedInstallerPOC are comparing it to the libraries listed below

• AlteredSecurity / Disable-TamperProtection
  A POC to disable TamperProtection and other Defender / MDE components
  ☆197Updated 8 months ago
• itaymigdal / PichichiH0ll0wer
  Nim process hollowing loader
  ☆55Updated 6 months ago
• blue0x1 / uac-bypass-oneliners
  Collection of one-liners to bypass User Account Control (UAC) in Windows. These techniques exploit certain behavior in Windows applicatio…
  ☆100Updated last month
• sensepost / mydumbedr
  ☆112Updated last year
• MythicAgents / Hannibal
  A Mythic Agent written in PIC C.
  ☆171Updated 2 weeks ago
• RedSiege / Chromatophore
  Utilities for obfuscating shellcode
  ☆51Updated 7 months ago
• EvilBytecode / Shellcode-Loader
  This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.
  ☆55Updated 7 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆83Updated 7 months ago
• nmantani / PS-MOTW
  PS-MOTW: PowerShell scripts to set / show / remove MOTW (Mark of the Web)
  ☆34Updated last year
• lsecqt / BSides-2024-Malware-Development-101-From-Zero-to-Non-Hero
  ☆33Updated 9 months ago
• BeetleChunks / Obligato
  This project is an implant framework designed for long term persistent access to Windows machines.
  ☆109Updated last year
• Z4kSec / IoctlHunter
  IoctlHunter is a command-line tool designed to simplify the analysis of IOCTL calls made by userland software targeting Windows drivers.
  ☆95Updated last year
• WKL-Sec / FuncAddressPro
  A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.
  ☆72Updated 11 months ago
• EvilBytecode / Lifetime-AmsiBypass
  Lifetime AMSI bypass.
  ☆35Updated 7 months ago
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆84Updated 3 weeks ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆46Updated 11 months ago
• Ap3x / WALKWHISPER
  Windows API header file parsing tool to generate source code for Windows API hashing
  ☆4Updated last year
• jakobfriedl / BenevolentLoader
  Shellcode loader using direct syscalls via Hell's Gate and payload encryption.
  ☆85Updated 8 months ago
• Chainski / ForceAdmin
  Collection of script templates to create infinite UAC prompts forcing a user to run as admin ⚠
  ☆102Updated this week
• Cracked5pider / CodeCave
  A bunch of scripts and code i wrote.
  ☆134Updated 3 months ago
• ZERODETECTION / MSC_Dropper
  ☆139Updated 6 months ago
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆46Updated 9 months ago
• tehstoni / RustyKeys
  UAC Bypass using CMSTP in Rust
  ☆24Updated 2 months ago
• MalwareTech / HiddenDesktop
  Create and enumerate hidden desktops.
  ☆90Updated last year
• Tw1sm / badger-builder
  badger-builder is an AI-assisted tool for generating dynamic Brute Ratel C4 profiles
  ☆53Updated 3 months ago
• hideckies / hermit
  A command and control framework.
  ☆46Updated last month
• Tylous / Ivy
  Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …
  ☆21Updated last year
• b4keSn4ke / Invoke-WinSATBypass
  Powershell UAC Bypass script leveraging WinSAT.exe
  ☆15Updated 3 years ago
• Evi1Grey5 / Bypass-Smartscreen-
  Let's analyze one of the ways to bypass the smart screen and write our own simple cryptor that runs the shellcode
  ☆56Updated 4 months ago