blue0x1 / uac-bypass-onelinersLinks
Collection of one-liners to bypass User Account Control (UAC) in Windows. These techniques exploit certain behavior in Windows applications to elevate privileges.
☆146Updated 11 months ago
Alternatives and similar repositories for uac-bypass-oneliners
Users that are interested in uac-bypass-oneliners are comparing it to the libraries listed below
Sorting:
- A POC to disable TamperProtection and other Defender / MDE components☆234Updated last year
- Dynamic shellcode loader with sophisticated evasion capabilities☆264Updated 2 months ago
- Ghosting-AMSI☆219Updated 7 months ago
- Just another C2 Redirector using CloudFlare. Support multiple C2 and multiple domains. Support for websocket listener.☆174Updated 8 months ago
- ☆259Updated last year
- Library that eases the use of indirect syscalls. Quite interesting AV/EDR bypass as PoC.☆161Updated 4 months ago
- Bypass Credential Guard by patching WDigest.dll using only NTAPI functions☆262Updated 8 months ago
- A Powershell AMSI Bypass technique via Vectored Exception Handler (VEH). This technique does not perform assembly instruction patching, f…☆166Updated last year
- Shaco is a linux agent for havoc☆167Updated 2 years ago
- Malleable shellcode loader written in C and Assembly utilizing direct or indirect syscalls for evading EDR hooks☆133Updated 11 months ago
- early cascade injection PoC based on Outflanks blog post☆231Updated last year
- This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.☆88Updated 7 months ago
- Slides & Code snippets for a workshop held @ x33fcon 2024☆275Updated last year
- comprehensive .NET tool designed to extract and display detailed information about Windows Defender exclusions and Attack Surface Reducti…☆209Updated last year
- .NET/PowerShell/VBA Offensive Security Obfuscator☆176Updated last year
- ☆229Updated last year
- ☆186Updated 5 months ago
- Build sneaky & malicious LNK files.☆153Updated 4 months ago
- Extracting NetNTLM without touching lsass.exe☆239Updated 2 years ago
- C# AV/EDR Killer using less-known driver (BYOVD)☆181Updated 2 years ago
- A PowerShell console in C/C++ with all the security features disabled☆293Updated last month
- SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the proce…☆151Updated 4 months ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆227Updated 9 months ago
- Conquest is a feature-rich and malleable command & control/post-exploitation framework developed in Nim.☆243Updated this week
- NoArgs is a tool designed to dynamically spoof and conceal process arguments while staying undetected. It achieves this by hooking into W…☆154Updated last year
- Adversary Emulation Framework☆126Updated 5 months ago
- Hide your P/Invoke signatures through other people's signed assemblies☆211Updated last year
- ☆145Updated last year
- Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs☆101Updated 2 years ago
- Lateral Movement via Bitlocker DCOM interfaces & COM Hijacking☆397Updated 5 months ago