WinGuard - User-Mode Windows Threat Detection Tool
☆40Aug 22, 2026Updated 2 months ago
Alternatives and similar repositories for WinGuard
Users that are interested in WinGuard are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tool to search SMB shares for VHD backup files, mount them, and dump locally stored credentials within.☆22Oct 9, 2026Updated last month
- Snaky C2 — Windows EDR evasion & Red Team C2 framework based on Rust & Nim (Indirect Syscalls, KCT injection, LSB Steganography)☆27Jul 27, 2026Updated 3 months ago
- Proof of concept exploit for CVE-2026-3775/CVE-2026-3780 and CVE-2026-57239 which lets you obtain NT AUTHORITY\SYSTEM rights via the Foxi…☆17Jul 27, 2026Updated 3 months ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆165Jul 20, 2026Updated 3 months ago
- My attempts at making life with VMware that little bit easier.☆14Aug 7, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆132Aug 22, 2026Updated 2 months ago
- PoC☆12Apr 7, 2025Updated last year
- Collection Of Scripts And Utilities For Windows Event Hunting☆19Feb 20, 2020Updated 6 years ago
- Read-only Active Directory & Microsoft Entra ID hygiene auditor in pure PowerShell. Collect once, analyze offline: deterministic findings…☆24Updated this week
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 5 months ago
- Modified version of PEAS client for offensive operations☆50May 18, 2026Updated 5 months ago
- Apache (CVE-2025-24813) GOExploiter Checker & Exploiter very Fast☆21Oct 5, 2025Updated last year
- Elasticsearch/Kibana environment and log data for Sigma workshop☆27Dec 20, 2019Updated 6 years ago
- ☆72Jul 12, 2026Updated 3 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- ☆58Feb 16, 2025Updated last year
- A modern Python-based Red Team Operations Workbench for managing engagements, intelligence, evidence, and reporting.☆16Aug 26, 2026Updated 2 months ago
- Dump LSASS via physical memory read primitives in vulnerable kernel drivers☆35Jul 23, 2026Updated 3 months ago
- A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening …☆39Oct 7, 2026Updated last month
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year
- A BOF designed to inspect processes memory and addresses☆43Apr 19, 2026Updated 6 months ago
- ☆22Mar 4, 2025Updated last year
- This PoC demonstrates a race condition in the Windows kernel leading to a double-free vulnerability, allowing local privilege escalation …☆21Nov 18, 2025Updated 11 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆76Jul 14, 2026Updated 3 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 10 months ago
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 6 months ago
- ☆42Apr 18, 2023Updated 3 years ago
- A catalog designed for environments with multiple or diffuse Information Security vulnerability-related information sources.☆12Sep 29, 2023Updated 3 years ago
- I’m building a hands‑on Security Operations Center (SOC) home lab from scratch and documenting my progress as I learn defensive security …☆18Nov 2, 2026Updated last week
- PoC for Exploiting CVE-2024-31848/49/50/51 - File Path Traversal☆18May 7, 2024Updated 2 years ago
- Check the Domain for Local Admin Access☆26Feb 20, 2025Updated last year
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆71Sep 23, 2026Updated last month
- Empire (https://github.com/EmpireProject/Empire) dockerized☆10Sep 17, 2018Updated 8 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆21May 7, 2026Updated 6 months ago
- goLoL is a Windows host scanner with dual support for LOLBAS binaries and LOLDrivers. It lists LOLBAS techniques runnable at your current…☆70Jun 28, 2026Updated 4 months ago
- RxRPC privesc PoC without fcrypt() restrictions☆23May 9, 2026Updated 6 months ago
- A collection of CTF write-ups focusing on web exploitation and OSINT challenges. Explore solutions, techniques, and insights from various…☆10Mar 18, 2025Updated last year
- ☆13Sep 22, 2026Updated last month
- CVE-2025-20029: Command Injection in TMSH CLI in F5 BIG-IP☆22Feb 23, 2025Updated last year
- SMBMap is a handy SMB enumeration tool - here with Kerberos support☆73Nov 3, 2021Updated 5 years ago
Are these results useful?