WinGuard - User-Mode Windows Threat Detection Tool
☆39Aug 22, 2026Updated last month
Alternatives and similar repositories for WinGuard
Users that are interested in WinGuard are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Userland EDR for Windows. ETW telemetry, behavioral correlation, MITRE ATT&CK.☆28Updated this week
- My attempts at making life with VMware that little bit easier.☆13Aug 7, 2023Updated 3 years ago
- A monthly Windows PE baseline dataset for Cyber security researchers☆24Sep 27, 2026Updated 3 weeks ago
- zero osint x☆74Aug 10, 2026Updated 2 months ago
- Collection Of Scripts And Utilities For Windows Event Hunting☆19Feb 20, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Crystal port of GodPotato to abuse SeImpersonatePrivilege with indirect syscalls, dynamic API resolution and compile-time string obfuscat…☆131Aug 22, 2026Updated last month
- ☆72Jul 12, 2026Updated 3 months ago
- A Windows x64 offensive research framework that constructs fully synthetic call stacks☆73Jul 14, 2026Updated 3 months ago
- A powerful Windows command-line tool for analyzing and searching ETW (Event Tracing for Windows) provider permissions from the Windows re…☆93Jul 29, 2025Updated last year
- A stealth-focused kernel-mode virtual HID mouse driver for Windows. Built with KMDF and VHF for precise, hardware-level input simulation …☆49Jul 27, 2026Updated 2 months ago
- A BOF designed to inspect processes memory and addresses☆41Apr 19, 2026Updated 6 months ago
- A zero-symbol static analysis engine that extracts and mathematically ranks the Windows RPC attack surface using an AHP-based risk model.☆15Aug 26, 2026Updated last month
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 9 months ago
- POC tool for ResetNightmare (CVE-2026-27912)☆224Aug 20, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated last month
- Process Impairment Exploit Chain.☆36Aug 12, 2026Updated 2 months ago
- shell script protector (obfuscation, embedded interpreter, DRM) - invisible to kernel tracing☆71Sep 23, 2026Updated 3 weeks ago
- One life, one app.☆21Updated this week
- LLVM based obfuscator☆44Sep 20, 2026Updated 3 weeks ago
- The AI Autonomous SOC & Purple-Team Engine☆29Aug 11, 2026Updated 2 months ago
- A Purple Team lab simulating Active Directory attacks (Kerberoasting, BloodHound, lateral movement) and implementing defensive hardening …☆37Oct 7, 2026Updated last week
- Automated HTTP/HTTPS simulation for Cobalt Strike Malleable C2 profiles☆28Sep 3, 2026Updated last month
- BT ve siber güvenlik risk yönetimi platformu — risk envanteri, 5×5 değerlendirme, aksiyon takibi ve kurumsal raporlama. PHP 8.3 + MariaDB…☆34Sep 19, 2026Updated last month
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Outfits your ludus AD domain with BadBlood info.☆17Aug 5, 2025Updated last year
- Sleep replacement that executes real, varied work to break behavioral pattern matching by EDR and anti-cheat systems☆88Jul 20, 2026Updated 2 months ago
- Research notes on Windows Component Object Model (COM) attack surface for offensive security and vulnerability research. Covers COM hijac…☆164Jul 20, 2026Updated 2 months ago
- Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants☆47Aug 20, 2026Updated last month
- Terminal UI for the Claude status page☆14Apr 28, 2026Updated 5 months ago
- A fast, modern and low-memory approach to processing a big JSON☆35Jun 20, 2026Updated 3 months ago
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆25Mar 4, 2026Updated 7 months ago
- Modified version of PEAS client for offensive operations☆50May 18, 2026Updated 5 months ago
- Staged DLL injection proof-of-concept built in C using Win32 APIs — developed in an isolated lab environment for red team certification s…☆42Jun 4, 2026Updated 4 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Frameless Browser‑in‑the‑Browser (BitB) - No iframes, no frame‑busting issues. A single‑script Shadow DOM / MutationObserver library for …☆52Aug 20, 2026Updated last month
- An Open-Source OSINT Spatial Intelligence & Entity Mapping Tool powered by Local AI☆57Updated this week
- An aggressor script that tracks operational changes made during a red team engagement. Gives you a full audit trail of what was changed a…☆29May 21, 2026Updated 4 months ago
- A Java debugger & library which allows user and programmer to control remote JavaVMs☆39Aug 14, 2026Updated 2 months ago
- A collection of techniques for process injection on Windows☆104Aug 16, 2026Updated 2 months ago
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆86Aug 1, 2026Updated 2 months ago
- process hollowing variant using NtCreateSection + NtMapViewOfSection + ResumeThread☆30Jan 9, 2022Updated 4 years ago