Tool designed to parse and analyze Microsoft Defender AV signature definition files
☆13Apr 12, 2026Updated 6 months ago
Alternatives and similar repositories for DefenderRulesPlus
Users that are interested in DefenderRulesPlus are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- (This is a fork used primarily to submit patches into upstream repository) RpcView is a free tool to explore and decompile Microsoft RPC …☆18May 27, 2023Updated 3 years ago
- Solemn is a lightweight command-line tool for Windows that automates adding drivers to the HVCI (HvciDisallowedImages) custom blocklist☆25May 2, 2026Updated 6 months ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆16Jul 22, 2022Updated 4 years ago
- A Windows C++ OLE/COM Object explorer written in WTL.☆17Feb 28, 2025Updated last year
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- 在线安软识别☆12Aug 6, 2025Updated last year
- ☆19Jul 23, 2023Updated 3 years ago
- Modified Version of Melkor @FuzzySecurity capable of creating disposable AppDomains in injected processes.☆27Sep 8, 2021Updated 5 years ago
- Monitoring Process Creation/Termination, Thread Creation/Termination and Image Load Notifications from a Kernel Driver☆13Oct 22, 2024Updated 2 years ago
- Portable corewar system with ICWS'94 extensions☆16Mar 21, 2018Updated 8 years ago
- FrostLock Injection is a freeze/thaw-based code injection technique that uses Windows Job Objects to temporarily freeze (suspend) a targe…☆48Apr 6, 2025Updated last year
- DictLoader / 字典匹配ShellCode加载器 / Code By:Tas9er☆15Oct 25, 2025Updated last year
- 内存加载执行golang elf二进制文件☆29Dec 22, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- 【Remain Fix】【测试项目 仍需修复】RexJava 是一个用 Go 语言编写的 Java 序列化流解析库，从 Ruby 的 rex-java 库移植而来。该库专门用于安全研究和渗透测试，能够解析和构建 Java 对象序列化格式的二进制流。Generated By …☆18Nov 16, 2025Updated 11 months ago
- ☆14Updated this week
- 可进行二次开发的卡密系统☆28Sep 17, 2022Updated 4 years ago
- ShellCode 解释器 (样例)，无可执行权限加载 ShellCode (点点 Star，非常感谢!)☆30Mar 7, 2025Updated last year
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆74Oct 5, 2026Updated last month
- 一个查看SQLite文件结构的工具软件☆24Sep 14, 2021Updated 5 years ago
- Linux Process Injection via Seccomp Notifier☆97Dec 9, 2025Updated 11 months ago
- Extremely simple but inefficient x86-64 assembly obfuscation.☆39Mar 1, 2016Updated 10 years ago
- Stack integrity verification to Detect SleepMask or CallStack Spoofer☆55Jul 13, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Auditor app prebuilt using the latest official release of the Auditor app.☆14Updated this week
- Repository of Microsoft Driver Block Lists based off of OS-builds☆45Apr 14, 2024Updated 2 years ago
- ADTools - Hacking Active Directory☆23Apr 10, 2026Updated 7 months ago
- Hotkey-based keylogger for Windows☆34Jul 19, 2026Updated 3 months ago
- golang实现通过dcerpc和ntlmssp获取Windows远程主机信息☆28Apr 16, 2024Updated 2 years ago
- ☆16Updated this week
- PdfViewer app prebuilt using the latest official release of the PdfViewer app.☆18Updated this week
- sigreturn-oriented(SROP) based sleep obfuscation poc for Linux☆70Dec 15, 2025Updated 10 months ago
- ☆31Sep 1, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- An open-source Linux GUI-based Remote Access Tool developed in C# with a Python payload, intended for legitimate penetration testing and …☆36Mar 9, 2026Updated 8 months ago
- lib-nosa is a minimalist C library designed to facilitate socket connections through AFD driver IOCTL operations on Windows.☆119Sep 8, 2024Updated 2 years ago
- Built from https://github.com/GrapheneOS/platform_packages_apps_GmsCompat/tree/15/config-holder☆19Updated this week
- Common tool☆10Feb 15, 2023Updated 3 years ago
- Windows Internals Book 7th edition Tools☆18Apr 26, 2020Updated 6 years ago
- Golang implement winrm client with pass the hash☆33Apr 29, 2024Updated 2 years ago
- Parse minidump files from system memory dumps using Ulf Frisk's vmm library☆11Mar 13, 2024Updated 2 years ago
Are these results useful?