A complete hands-on reference of 67 Windows persistence techniques used by real-world APT groups. Each technique includes MITRE ATT&CK TTP mapping, known threat actor attribution, attack commands, verification steps, and cleanup — organized from No-Admin to Admin level. Built for red teamers, malware analysts, and cybersecurity learners.
☆20Jun 2, 2026Updated last month
Alternatives and similar repositories for window-persistence-Privilege-Escalation
Users that are interested in window-persistence-Privilege-Escalation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Packages for the Rux programming language☆15Updated this week
- Intelligent analysis for Indian stock indices and individual stocks with AI-powered insights☆25Jun 25, 2025Updated last year
- Tools for offensive security of NetBackup infrastructures☆48Jun 6, 2023Updated 3 years ago
- Notion C2 Profile for Mythic☆47Apr 30, 2026Updated 2 months ago
- ☆25Sep 6, 2025Updated 10 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- CVE-2025-64155: Fortinet FortiSIEM Argument Injection to Remote Code Execution☆32Jan 13, 2026Updated 6 months ago
- Native C++ access to Active Directory over ADWS, no .NET, no WCF, no HTTP stack.☆81Mar 27, 2026Updated 3 months ago
- Binary Ninja Plugins to work with Unpac.Me unpacking service☆13Apr 24, 2025Updated last year
- Advanced Domain Controller attack and credential analysis tool leveraging DonPAPI database☆267Nov 3, 2025Updated 8 months ago
- Evasion kit for Cobalt Strike☆30Jan 16, 2026Updated 5 months ago
- Python au lycée - tome 1☆46Mar 25, 2026Updated 3 months ago
- ☆37Updated this week
- A clean and simple algorithms visualiser.☆10Mar 1, 2025Updated last year
- Microsoft Network Service Fingerprinting Tool☆73Jan 2, 2026Updated 6 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- ☆12Apr 3, 2026Updated 3 months ago
- Dispatch AI coding agents (Claude Code, Copilot, OpenCode) as MCP tools☆20Apr 8, 2026Updated 3 months ago
- Modified version of PEAS client for offensive operations☆51May 18, 2026Updated last month
- a BOF implementation of various registry persistence methods☆98Nov 11, 2025Updated 8 months ago
- A simple server to act as a Veeam "honeypot" providing alerting for network scans for Veeam services☆17Aug 31, 2025Updated 10 months ago
- ☆16Mar 3, 2025Updated last year
- Automatically deploying Mythic C2 in Azure using Terraform☆20Jul 3, 2026Updated last week
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆17Apr 7, 2026Updated 3 months ago
- Awesome MalDev Links☆76Jun 21, 2026Updated 3 weeks ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- A sports betting environment for OpenAI Gym.☆26Sep 4, 2025Updated 10 months ago
- My studies on Malware Development☆20Jul 6, 2026Updated last week
- Reflective PE loader written in Zig. Loads and executes native and .NET PE files directly from memory.☆67Mar 2, 2026Updated 4 months ago
- forgive me :3☆34Jan 1, 2026Updated 6 months ago
- PowerShell tool for auditing Microsoft Entra ID Conditional Access policies and MFA compliance☆44Aug 2, 2025Updated 11 months ago
- Doraemon made in pure HTML and CSS☆16May 23, 2026Updated last month
- CVE-2026-45250 - FreeBSD 14.x LPE☆22May 21, 2026Updated last month
- Smuggling C2 comms through links previews☆18Jun 17, 2026Updated 3 weeks ago
- Advanced PoC & Research for CVE-2026-0828 (Safetica) and CVE-2025-7771 (ThrottleStop). Analysis of BYOVD (Bring Your Own Vulnerable Drive…☆45Feb 4, 2026Updated 5 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆191Oct 21, 2025Updated 8 months ago
- CVE-2025-62215 is an Elevation of Privilege (EoP) vulnerability in the Windows Kernel, disclosed in November 2025 and confirmed to be act…☆32Nov 14, 2025Updated 8 months ago
- A simple Balatro save manager for iOS and macOS☆30May 11, 2024Updated 2 years ago
- Interactive PowerShell framework for testing WMI, COM, LOLBAS, and persistence techniques☆130Dec 28, 2025Updated 6 months ago
- Exploitation of CVE-2025-29969☆65Feb 20, 2026Updated 4 months ago
- Sylva Signer - Local in-browser IPA signing POC☆26Updated this week
- AI-powered malware traffic analysis and network forensics via the Model Context Protocol☆18May 27, 2026Updated last month