Alternatives and similar repositories for WindowsMDM-LPE-0Day

Users that are interested in WindowsMDM-LPE-0Day are comparing it to the libraries listed below

• su1s / encryptor
  Windows shellcode encoding and encrypting tool
  ☆20Updated 3 years ago
• mrd0x / pe2shc-to-cdb
  Convert shellcode generated using pe_2_shellcode to cdb format.
  ☆100Updated 4 years ago
• plackyhacker / Peruns-Fart
  Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.
  ☆117Updated 4 years ago
• embee-research / Randomise-api-hashes-cobalt-strike
  Bypass Detection By Randomising ROR13 API Hashes
  ☆143Updated 3 years ago
• hackerhouse-opensource / ColorDataProxyUACBypass
  Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…
  ☆142Updated last week
• Wh04m1001 / IFaultrepElevatedDataCollectionUAC
  ☆133Updated 3 years ago
• byt3bl33d3r / BOF-Nim
  Cobalt Strike BOF Files with Nim!
  ☆86Updated 3 years ago
• skahwah / encrypt
  Pseudorandom AES-256 encryption designed to protect shellcode and arbitrary strings. C# and C/C++ compatible.
  ☆101Updated 4 years ago
• expl0itabl3 / uac-bypass-cmstp
  Use CMSTP.exe to bypass UAC.
  ☆52Updated 3 years ago
• exploitblizzard / Syscall-Example
  Using syscall to load shellcode, Evasion techniques
  ☆27Updated 4 years ago
• JrM2628 / httpworker
  A Flask-based HTTP(S) command and control (C2) framework with a web interface. Custom Windows EXE/DLL implants written in C++. For educat…
  ☆89Updated 4 months ago
• Octoberfest7 / KillDefender
  A small (Edited) POC to make defender useless by removing its token privileges and lowering the token integrity
  ☆32Updated 3 years ago
• sailay1996 / SpoolTrigger
  Weaponizing for privileged file writes bugs with PrintNotify Service
  ☆136Updated 3 years ago
• FULLSHADE / Auto-Elevate
  Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit by combining a COM UAC bypass and Token…
  ☆162Updated 4 years ago
• Kara-4search / NewNtdllBypassInlineHook_CSharp
  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.
  ☆62Updated 4 years ago
• kindtime / nosferatu
  Windows NTLM Authentication Backdoor
  ☆241Updated last year
• mez-0 / InMemoryNET
  Exploring in-memory execution of .NET
  ☆138Updated 3 years ago
• adamsvoboda / nim-loader
  WIP shellcode loader in nim with EDR evasion techniques
  ☆221Updated 3 years ago
• klezVirus / SharpSelfDelete
  C# implementation of the research by @jonaslyk and the drafted PoC from @LloydLabs
  ☆150Updated 4 years ago
• mez-0 / winrmdll
  C++ WinRM API via Reflective DLL
  ☆145Updated 4 years ago
• pwn1sher / uuid-loader
  UUID based Shellcode loader for your favorite C2
  ☆86Updated 4 years ago
• yashmundra / Shellcode-Encryption
  Encrypting shellcode to Bypass AV
  ☆71Updated 7 years ago
• OsandaMalith / PE2HTML
  Injects HTML/PHP/ASP to the PE
  ☆104Updated 5 years ago
• Kara-4search / HellgateLoader_CSharp
  Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.
  ☆18Updated 4 years ago
• Octoberfest7 / KDStab
  BOF combination of KillDefender and Backstab
  ☆170Updated 2 years ago
• OlivierLaflamme / DNSWho
  transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV
  ☆50Updated 5 years ago
• py7hagoras / GetSystem
  This is a C# implementation of making a process/executable run as NT AUTHORITY/SYSTEM. This is achieved through parent ID spoofing of alm…
  ☆109Updated 2 years ago
• trustedsec / SliverKeylogger
  ☆169Updated 2 years ago
• Kara-4search / MappingInjection_CSharp
  MappingInjection via csharp
  ☆40Updated 4 years ago
• Cerbersec / KillDefenderBOF
  Beacon Object File PoC implementation of KillDefender
  ☆235Updated 3 years ago