Alternatives and similar repositories for defendnot

Users that are interested in defendnot are comparing it to the libraries listed below

• pulpocaminante / Stuxnet
  WMI virus, because funny
  ☆282Updated 3 months ago
• xaitax / Chrome-App-Bound-Encryption-Decryption
  Decrypt App-Bound encrypted keys in Chrome 127+, using the IElevator COM interface bypassing path validation and encryption protections.
  ☆518Updated this week
• SafeBreach-Labs / WindowsDowndate
  A tool that takes over Windows Updates to craft custom downgrades and expose past fixed vulnerabilities
  ☆665Updated 6 months ago
• Meckazin / ChromeKatz
  Dump cookies and credentials directly from Chrome/Edge process memory
  ☆1,185Updated 5 months ago
• x86matthew / WinVisor
  WinVisor - A hypervisor-based emulator for Windows x64 user-mode executables using Windows Hypervisor Platform API
  ☆566Updated 3 months ago
• gatariee / gocheck
  Because AV evasion should be easy.
  ☆718Updated 5 months ago
• JohnHammond / recaptcha-phish
  Phishing with a fake reCAPTCHA
  ☆548Updated 8 months ago
• es3n1n / no-defender
  A slightly more fun way to disable windows defender + firewall. (through the WSC api)
  ☆1,953Updated 11 months ago
• SafeBreach-Labs / PoolParty
  A set of fully-undetectable process injection techniques abusing Windows Thread Pools
  ☆1,095Updated last year
• Sh3lldon / FullBypass
  A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…
  ☆749Updated last month
• blackmassgroup / minegrief
  Self-spreading Java malware targeting Minecraft servers. Infected servers are capable of scanning for other vulnerable servers, encryptin…
  ☆119Updated 4 months ago
• joaoviictorti / shadow-rs
  Windows Kernel Rootkit in Rust
  ☆597Updated this week
• Cryakl / Ransomware-Database
  For educational purposes only, samples of ransomware/wiper trojans including screenshots/ransom-notes.
  ☆332Updated last week
• MzHmO / Exploit-Street
  Complete list of LPE exploits for Windows (starting from 2023)
  ☆785Updated 2 weeks ago
• lkarlslund / nifo
  Nuke It From Orbit - remove AV/EDR with physical access
  ☆258Updated 5 months ago
• eversinc33 / Banshee
  Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.
  ☆535Updated last week
• lem0nSec / ShellGhost
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆1,176Updated last year
• cyberark / PipeViewer
  A tool that shows detailed information about named pipes in Windows
  ☆639Updated 5 months ago
• BlackSnufkin / LitterBox
  sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment
  ☆767Updated this week
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,169Updated last month
• itaymigdal / awesome-injection
  Centralized resource for listing and organizing known injection techniques and POCs
  ☆481Updated 3 weeks ago
• hackerschoice / bincrypter
  Pack/Encrypt/Obfuscate ELF + SHELL scripts
  ☆296Updated 3 weeks ago
• Wack0 / bitlocker-attacks
  A list of public attacks on BitLocker
  ☆281Updated 2 months ago
• namazso / MagicSigner
  Signtool for expired certificates
  ☆478Updated last year
• Accenture / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆1,039Updated last year
• Krypteria / AtlasLdr
  Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls
  ☆369Updated 7 months ago
• hackerhouse-opensource / SignToolEx
  Patching "signtool.exe" to accept expired certificates for code-signing.
  ☆275Updated 9 months ago
• boku7 / Loki
  🧙‍♂️ Node.js Command & Control for Script-Jacking Vulnerable Electron Applications
  ☆960Updated this week
• sadreck / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆229Updated last year
• hackerhouse-opensource / Marble
  The CIA's Marble Framework is designed to allow for flexible and easy-to-use obfuscation when developing tools.
  ☆291Updated last year