Alternatives and similar repositories for WindowsDowndate:

Users that are interested in WindowsDowndate are comparing it to the libraries listed below

• BC-SECURITY / Moriarty
  Moriarty is designed to enumerate missing KBs, detect various vulnerabilities, and suggest potential exploits for Privilege Escalation in…
  ☆511Updated 7 months ago
• MzHmO / Exploit-Street
  Complete list of LPE exploits for Windows (starting from 2023)
  ☆768Updated last week
• gatariee / gocheck
  Because AV evasion should be easy.
  ☆681Updated 4 months ago
• SafeBreach-Labs / PoolParty
  A set of fully-undetectable process injection techniques abusing Windows Thread Pools
  ☆1,076Updated last year
• Helixo32 / CrimsonEDR
  Simulate the behavior of AV/EDR for malware development training.
  ☆518Updated last year
• Xacone / BestEdrOfTheMarket
  AV/EDR Evasion Lab for Training & Learning Purposes
  ☆1,219Updated last month
• daem0nc0re / PrivFu
  Kernel mode WinDbg extension and PoCs for token privilege investigation.
  ☆841Updated 2 months ago
• daem0nc0re / TangledWinExec
  PoCs and tools for investigation of Windows process execution techniques
  ☆912Updated 2 weeks ago
• Meowmycks / LetMeowIn
  A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.
  ☆394Updated 8 months ago
• xaitax / Chrome-App-Bound-Encryption-Decryption
  Tool to decrypt App-Bound encrypted keys in Chrome 127+, using the IElevator COM interface with path validation and encryption protection…
  ☆340Updated 5 months ago
• vxCrypt0r / Voidgate
  A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfve…
  ☆511Updated 9 months ago
• vu-ls / Crassus
  ☆570Updated 4 months ago
• senzee1984 / EDRPrison
  Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry
  ☆396Updated 7 months ago
• ZeroMemoryEx / Terminator
  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
  ☆960Updated last year
• netero1010 / EDRSilencer
  A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …
  ☆1,637Updated 4 months ago
• rad9800 / BootExecuteEDR
  ☆352Updated 3 months ago
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,140Updated this week
• MaorSabag / TrueSightKiller
  CPP AV/EDR Killer
  ☆394Updated last year
• reveng007 / DarkWidow
  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …
  ☆662Updated 2 weeks ago
• x0xr00t / Automated-MUlti-UAC-Bypass
  Automated Multi UAC BYPASS for win10|win11|win12-pre-release|ws2019|ws2022
  ☆440Updated 4 months ago
• redteamsocietegenerale / DLLirant
  DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.
  ☆488Updated 2 years ago
• helviojunior / hookchain
  HookChain: A new perspective for Bypassing EDR Solutions
  ☆506Updated 2 months ago
• Xre0uS / MultiDump
  MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.
  ☆508Updated this week
• Offensive-Panda / ShadowDumper
  Shadow Dumper is a powerful tool used to dump LSASS memory, often needed in penetration testing and red teaming. It uses multiple advance…
  ☆514Updated 3 weeks ago
• thefLink / Hunt-Sleeping-Beacons
  Aims to identify sleeping beacons
  ☆575Updated 3 months ago
• SafeBreach-Labs / CVE-2024-49113
  LdapNightmare is a PoC tool that tests a vulnerable Windows Server against CVE-2024-49113
  ☆484Updated 2 months ago
• wavestone-cdt / EDRSandblast
  ☆1,618Updated 7 months ago
• eversinc33 / Banshee
  Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.
  ☆527Updated 3 weeks ago
• Meckazin / ChromeKatz
  Dump cookies and credentials directly from Chrome/Edge process memory
  ☆1,150Updated 4 months ago
• Accenture / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆1,033Updated last year