MDE/MDI Defender setup for Ludus
☆38Mar 5, 2026Updated this week
Alternatives and similar repositories for ludus-defender-lab
Users that are interested in ludus-defender-lab are comparing it to the libraries listed below
Sorting:
- A small go harness that uses Ollama to orchestrate LLMs in a restricted process flow☆16Sep 10, 2024Updated last year
- Enable EFS service as low priv user (PE & BOF)☆21Jul 6, 2025Updated 7 months ago
- A cmake template for crystal palace☆39Dec 20, 2025Updated 2 months ago
- arm64 linux position-independent shellcode framework☆30Dec 12, 2025Updated 2 months ago
- Framework complet d'analyse de malware☆12Feb 22, 2016Updated 10 years ago
- Pythonize Intruder Payload☆13Dec 15, 2020Updated 5 years ago
- A PowerShell script to prevent Sysmon from writing its events☆16Apr 23, 2020Updated 5 years ago
- Log converter from CS log to Ghostwriter CSV☆31Nov 23, 2020Updated 5 years ago
- Changes MDM registry keys without the need for an MDM server to quickly disable WiFi-Sense and handle other potential security concerns i…☆15Aug 10, 2015Updated 10 years ago
- JALSI - Just Another Lame Shellcode Injector☆30Aug 1, 2021Updated 4 years ago
- Proof of concept open source implementation of an UAC bypass exploit, based in 2 windows failures.☆12Jun 2, 2020Updated 5 years ago
- Lateral Movement Bof with MSI ODBC Driver Install☆145Sep 30, 2025Updated 5 months ago
- ☆50Jun 4, 2025Updated 9 months ago
- Create local administrators with the SAMR API (lowest-level technique). Implemented in C#, Crystal, Python and Rust☆56Jan 27, 2026Updated last month
- HoneyZure is a honeypot tool specifically designed for Azure environments, fully provisioned through Terraform. It leverages a Log Analyt…☆17Jun 11, 2024Updated last year
- A proof-of-concept tool that attempts to retrieve the configuration from the memory dump of an F-Secure C3 Relay executable.☆17Jul 2, 2021Updated 4 years ago
- DNS logging, detection, ...☆15Mar 5, 2022Updated 4 years ago
- PoC of injecting code into a running Linux process☆23Sep 11, 2019Updated 6 years ago
- A lexer and parser for Sleep☆20Feb 20, 2026Updated last week
- A simple POC to show how to chain multiple callbacks via tail calls to artificially construct a call stack☆99Dec 22, 2025Updated 2 months ago
- Beacon Object File (BOF) port of DumpGuard for extracting NTLMv1 hashes from sessions on modern Windows systems.☆210Jan 6, 2026Updated 2 months ago
- ☆28Feb 11, 2026Updated 3 weeks ago
- Push notifications to Slack channel or to custom server based on BurpSuite response conditions.☆17Nov 26, 2020Updated 5 years ago
- Shared library loading application for Linux written in Go.☆16Aug 31, 2020Updated 5 years ago
- SCEP request tool for AD CS and Intune☆74Oct 24, 2025Updated 4 months ago
- A way to maintain long-term access to Windows LAPS for lateral movement in AD via installing an Offensive LAPS RPC backdoor on a DC.☆29Jun 9, 2025Updated 8 months ago
- A bunch of shenanigans using functions, VEH and more☆37Jun 8, 2025Updated 8 months ago
- ☆59Oct 24, 2024Updated last year
- Custom Google search engine dedicated to IT security & hacking stuff. Over 240 high-quality sources.☆83Jan 15, 2026Updated last month
- Cobaltstrike Reflective Loader with Synthetic Stackframe☆186Jan 17, 2026Updated last month
- PDB file inspection tool☆132Nov 21, 2025Updated 3 months ago
- A BOF that's a BOF Loader and more☆199Jan 17, 2026Updated last month
- black hat Asia 2017 Slides☆22Mar 30, 2017Updated 8 years ago
- ☆39Nov 25, 2025Updated 3 months ago
- The DCERPC only printerbug.py version☆206Oct 30, 2025Updated 4 months ago
- A pcap capture analysis helper☆25Aug 30, 2023Updated 2 years ago
- Slides and resources from MCTTP 2025 Talk☆66Oct 26, 2025Updated 4 months ago
- ☆23Jun 9, 2024Updated last year
- The hidden mstsc recorder player☆27Mar 9, 2020Updated 5 years ago