Overview of MS Defender
☆166Feb 20, 2026Updated 8 months ago
Alternatives and similar repositories for defender_overview
Users that are interested in defender_overview are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- MAPS cloud scanner and response parser for Microsoft Defender research.☆96Feb 19, 2026Updated 8 months ago
- dcsync bof☆52Feb 13, 2026Updated 8 months ago
- A template for writing Beacon Object Files (BOFs) in Rust☆136Feb 11, 2026Updated 8 months ago
- Dockerized template to build CS BOFs using clang-cl☆26Jan 29, 2026Updated 9 months ago
- A BOF designed to inspect processes memory and addresses☆42Apr 19, 2026Updated 6 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆65Jul 5, 2026Updated 3 months ago
- A Beacon Object File (BOF) that talks directly to Windows authentication packages through the LSA untrusted/trusted client interface, wit…☆298Feb 21, 2026Updated 8 months ago
- Rust C2 agent for Mythic that produces polymorphic shellcode: per-build function shuffle + ChaCha20-encrypted data sections; no_std/no_ma…☆75May 13, 2026Updated 5 months ago
- Beacon Object File to Enable Chrome DevTools Protocol (CDP)☆133Oct 17, 2026Updated last week
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆106Jan 10, 2026Updated 9 months ago
- ☆89Feb 12, 2026Updated 8 months ago
- Shellcode injection using the Windows Debugging API☆182Jan 4, 2026Updated 9 months ago
- This repo contains the results of an internal re-write of impacket I undertook at my current company. It contains some of the IoCs found …☆355Sep 7, 2026Updated last month
- C2-agnostic BOF collection, categorized by attack chain phase. Designed to be small and modular, allowing for quick execution and automat…☆321Oct 17, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Reversed cassandra source code for educational purposes☆36Jul 3, 2026Updated 3 months ago
- ☆16Jan 15, 2026Updated 9 months ago
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆193Jan 17, 2026Updated 9 months ago
- abusing windows toast notifications for fun and user manipulation☆107Jul 11, 2026Updated 3 months ago
- DSCourier is a proof-of-concept that uses the WinGet Configuration COM API to apply DSC configurations through Microsoft-signed binaries.☆209Jun 25, 2026Updated 4 months ago
- Python and BOF utilites to the determine EPA enforcement levels of popular NTLM relay targets from the offensive perspective☆196May 31, 2026Updated 4 months ago
- MDE/MDI Defender setup for Ludus☆62Jul 30, 2026Updated 2 months ago
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆74Oct 5, 2026Updated 3 weeks ago
- Safe Harbor is a BOF that streamlines process reconnaissance for red team operations by identifying trusted, low-noise targets to maintai…☆81Oct 27, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- OneDrive as a covert C2 transport for Cobalt Strike☆77Sep 19, 2026Updated last month
- Async BOF for NTLMv2 Hash Snooping from ETW☆13Apr 2, 2026Updated 6 months ago
- Lnk crafting and research tools☆187Mar 4, 2026Updated 7 months ago
- Object file loader implemented as a post-ex DLL for asynchronous BOF execution.☆29Jul 23, 2026Updated 3 months ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆164Jul 20, 2026Updated 3 months ago
- Windows protocol library, including SMB and RPC implementations, among others.☆840Oct 5, 2026Updated 3 weeks ago
- One WSL BOF to rule them all☆190Jan 14, 2026Updated 9 months ago
- Windows C/C++ development environment on Linux☆18Mar 29, 2026Updated 7 months ago
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- One PsExec client to rule them all☆15Mar 25, 2026Updated 7 months ago
- Dump protected process memory by using BYOVD to tamper with handle objects in the kernel.☆48Aug 5, 2025Updated last year
- A Cobalt Strike BOF implementation of the SilentHarvest registry dumping technique☆184Apr 14, 2026Updated 6 months ago
- A credential extraction BOF for Veeam Backup and Replication and Veeam One☆82Sep 16, 2026Updated last month
- Locate dlls and function addresses without PEB Walk and EAT parsing☆111Nov 7, 2025Updated 11 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆75Jul 14, 2026Updated 3 months ago
- Fritter is a heavily modified fork of TheWover and Odzhan's Donut shellcode generator.☆260Aug 4, 2026Updated 2 months ago