alphaSeclab / windows-securityLinks
Resources About Windows Security. 1100+ Open Source Tools. 3300+ Blog Post and Videos.
☆493Updated 5 years ago
Alternatives and similar repositories for windows-security
Users that are interested in windows-security are comparing it to the libraries listed below
Sorting:
- DLL Hijacking Detection Tool☆537Updated 6 years ago
- A tool to kill antimalware protected processes☆1,502Updated 4 years ago
- Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.☆751Updated 4 years ago
- Evade sysmon and windows event logging☆624Updated 5 years ago
- Project for identifying executables and DLLs vulnerable to relative path DLL hijacking.☆483Updated last year
- Scan files or process memory for CobaltStrike beacons and parse their configuration☆920Updated 4 years ago
- Setup scripts for my Malware Analysis VMs☆258Updated 3 years ago
- LSASS memory dumper using direct system calls and API unhooking.☆1,570Updated 5 years ago
- Process Ghosting - a PE injection technique, similar to Process Doppelgänging, but using a delete-pending file instead of a transacted fi…☆677Updated last year
- SigFlip is a tool for patching authenticode signed PE files (exe, dll, sys ..etc) without invalidating or breaking the existing signature…☆1,243Updated 2 years ago
- Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…☆1,181Updated 2 years ago
- A protective and Low Level Shellcode Loader that defeats modern EDR systems.☆916Updated last year
- collect for learning cases☆595Updated last year
- AV/EDR evasion via direct system calls.☆1,776Updated 3 years ago
- Hunts out CobaltStrike beacons and logs operator command output☆949Updated last year
- ☆1,126Updated 2 years ago
- AV/EDR evasion via direct system calls.☆1,973Updated 3 years ago
- C/C++ code examples of my blog.☆397Updated 3 years ago
- ☆2,170Updated 2 years ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆981Updated 3 years ago
- Stop Windows Defender programmatically☆996Updated 3 years ago
- wsb-detect enables you to detect if you are running in Windows Sandbox ("WSB")☆372Updated 2 years ago
- This program is designed to demonstrate various process injection techniques☆1,217Updated 5 months ago
- Excel Macro Document Reader/Writer for Red Teamers & Analysts☆524Updated 3 years ago
- A small POC to make defender useless by removing its token privileges and lowering the token integrity☆685Updated 3 years ago
- Open-Source Shellcode & PE Packer☆2,049Updated last year
- A native backdoor module for Microsoft IIS (Internet Information Services)☆555Updated 5 years ago
- eBook "Bypassing AVS by C#.NET Programming" (Free Chapters only)☆466Updated 2 years ago
- Alternative Shellcode Execution Via Callbacks☆1,682Updated 3 years ago
- ☆776Updated 2 years ago