Alternatives and similar repositories for WindowsMDM-LPE-0Day:

Users that are interested in WindowsMDM-LPE-0Day are comparing it to the libraries listed below

• exploitblizzard / Syscall-Example
  Using syscall to load shellcode, Evasion techniques
  ☆27Updated 3 years ago
• hackerhouse-opensource / ColorDataProxyUACBypass
  Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…
  ☆138Updated 2 years ago
• JrM2628 / httpworker
  A Flask-based HTTP(S) command and control (C2) framework with a web interface. Custom Windows EXE/DLL implants written in C++. For educat…
  ☆90Updated last year
• plackyhacker / Peruns-Fart
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆106Updated 3 years ago
• GetRektBoy724 / TripleS
  Extracting Syscall Stub, Modernized
  ☆63Updated 3 years ago
• pwn1sher / uuid-loader
  UUID based Shellcode loader for your favorite C2
  ☆86Updated 3 years ago
• EspressoCake / DLL-Exports-Extraction-BOF
  DLL Exports Extraction BOF with optional NTFS transactions.
  ☆82Updated 3 years ago
• Wh04m1001 / IFaultrepElevatedDataCollectionUAC
  ☆134Updated 2 years ago
• su1s / encryptor
  Windows shellcode encoding and encrypting tool
  ☆21Updated 2 years ago
• Aetsu / SLib
  SLib is a sandbox evasion library that implements some of the checks from https://evasions.checkpoint.com in C#
  ☆64Updated last year
• klezVirus / SharpSelfDelete
  C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆149Updated 3 years ago
• Octoberfest7 / KillDefender
  A small (Edited) POC to make defender useless by removing its token privileges and lowering the token integrity
  ☆32Updated 2 years ago
• expl0itabl3 / uac-bypass-cmstp
  Use CMSTP.exe to bypass UAC.
  ☆42Updated 2 years ago
• alfarom256 / StinkyLoader
  It stinks
  ☆102Updated 2 years ago
• roberreigada / LsassUnhooker
  Little program written in C# to bypass EDR hooks and dump the content of the lsass process
  ☆61Updated 3 years ago
• Octoberfest7 / KDStab
  BOF combination of KillDefender and Backstab
  ☆166Updated 2 years ago
• Kara-4search / FullDLLUnhooking_CSharp
  Unhook DLL via cleaning the DLL 's .text section
  ☆9Updated 3 years ago
• sailay1996 / windows-stuff
  my learning case about windows
  ☆21Updated 3 years ago
• WKL-Sec / Winsocky
  Winsocket for Cobalt Strike.
  ☆98Updated last year
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆136Updated 3 years ago
• ShadowMccc / MemoryEvasion
  A Cobalt Strike memory evasion loader for redteamers
  ☆99Updated 2 years ago
• byt3bl33d3r / BOF-Nim
  Cobalt Strike BOF Files with Nim!
  ☆84Updated 2 years ago
• yashmundra / Shellcode-Encryption
  Encrypting shellcode to Bypass AV
  ☆72Updated 6 years ago
• arsium / ShellCodeExec
  My personal shellcode loader
  ☆31Updated 2 years ago
• battleoverflow / lsass-dump
  Simple LSASS Dumper created using C++ as an alternative to using Mimikatz memory dumper
  ☆54Updated 11 months ago
• mrd0x / pe2shc-to-cdb
  Convert shellcode generated using pe_2_shellcode to cdb format.
  ☆96Updated 3 years ago
• OlivierLaflamme / DNSWho
  transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV
  ☆50Updated 4 years ago
• mez-0 / InMemoryNET
  Exploring in-memory execution of .NET
  ☆137Updated 2 years ago
• sailay1996 / cve-2022-21882-poc
  lpe poc for cve-2022-21882
  ☆49Updated 3 years ago
• r3nhat / XORedReflectiveDLL
  Reflective DLL Injection with obfuscated (XOR) shellcode
  ☆73Updated 4 years ago