Convert Microsoft Defender Antivirus Signatures (VDM) into SQL DB
☆30Nov 21, 2025Updated 10 months ago
Alternatives and similar repositories for defender2db
Users that are interested in defender2db are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆16Jul 22, 2022Updated 4 years ago
- Learning notes of amazing Sliver C2 project.☆24Apr 14, 2023Updated 3 years ago
- Data EXfiltration TestER☆21Aug 28, 2019Updated 7 years ago
- Stack spoofing Detection for CET processes by comparing shadow and user stacks.☆40May 22, 2026Updated 4 months ago
- Extract the Procedures (TTP) from CTI reports☆18Dec 13, 2025Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Language extension for Crystal Palace Specification files☆14Jun 6, 2026Updated 4 months ago
- Aggressor script that gets the latest commands from CobaltStrikes web site and creates an aggressor script based on tool options.☆23Oct 6, 2021Updated 5 years ago
- Capture screenshots from .NET using .NET methods or Windows API calls☆65Mar 9, 2020Updated 6 years ago
- ☆130Jun 28, 2023Updated 3 years ago
- A work in progress BOF/COFF loader in Rust☆51Mar 22, 2023Updated 3 years ago
- ☆16Jun 15, 2025Updated last year
- string encryption in Nim☆19Jun 15, 2024Updated 2 years ago
- Lockless BOF☆78May 2, 2025Updated last year
- Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing.☆56Mar 30, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆121Oct 9, 2023Updated 3 years ago
- ☆128Jun 28, 2023Updated 3 years ago
- ☆141Jun 21, 2023Updated 3 years ago
- Combining 3 techniques (Threadless Injection + DLL Stomping + Caro-Kann) together to evade MDE.☆81Dec 23, 2023Updated 2 years ago
- This repository will contain source codes from the Tradecraft improvement blog series☆14Mar 27, 2025Updated last year
- BOF for Havoc that copies locked Windows files (SAM, SYSTEM, NTDS.dit) via raw MFT parsing — no VSS, no Registry APIs, no PowerShell☆135Apr 6, 2026Updated 6 months ago
- Golang bindings for PE-sieve☆43Nov 11, 2023Updated 2 years ago
- ☆104Oct 7, 2023Updated 3 years ago
- Implementing an early exception handler for hooking and threadless process injection without relying on VEH or SEH☆139Aug 31, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆151Nov 6, 2025Updated 11 months ago
- Shellcode capable of bypassing EAF / IAF mitigations☆28Apr 11, 2023Updated 3 years ago
- Rust bindings to the System Informer's (formerly known as Process Hacker) "phnt" native Windows headers☆50Jul 21, 2026Updated 2 months ago
- ☆19Nov 28, 2024Updated last year
- Cobalt Strike beacon object file that allows you to query and make changes to the Windows Registry☆31Feb 11, 2021Updated 5 years ago
- load shellcode without P/D Invoke and VirtualProtect call.☆170Sep 2, 2025Updated last year
- A modern Rust implementation of the original Stardust project, providing a sophisticated 32/64-bit shellcode template that features posit…☆63Mar 17, 2025Updated last year
- Local & remote Windows DLL Proxying☆171Jun 17, 2024Updated 2 years ago
- Exemplary LLVM function pass implementing Control Flow Flattening.☆17May 2, 2018Updated 8 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Overview of MS Defender☆165Feb 20, 2026Updated 7 months ago
- MAPS cloud scanner and response parser for Microsoft Defender research.☆95Feb 19, 2026Updated 7 months ago
- Convert Microsoft Defender Antivirus Signatures (VDM) into a SQL DB☆27Jun 27, 2025Updated last year
- Implementation of Advanced Module Stomping and Heap/Stack Encryption☆235Jul 25, 2023Updated 3 years ago
- ☆29May 10, 2024Updated 2 years ago
- The standard Go net.Conn interface using Azure Storage services as the transport layer.☆32Updated this week
- Sleep obfuscation for shellcode implants and their reflective shit☆54Sep 19, 2023Updated 3 years ago