A complete hands-on reference of 67 Windows persistence techniques used by real-world APT groups. Each technique includes MITRE ATT&CK TTP mapping, known threat actor attribution, attack commands, verification steps, and cleanup — organized from No-Admin to Admin level. Built for red teamers, malware analysts, and cybersecurity learners.
☆21Jun 2, 2026Updated 4 months ago
Alternatives and similar repositories for window-persistence-Privilege-Escalation
Users that are interested in window-persistence-Privilege-Escalation are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PETriage: A symbol-unified PE file reader for triage, built for multi-platform and multi-interface use.☆13Aug 4, 2026Updated 2 months ago
- UAC Bypass using RequestTrace scheduled task☆29Jul 23, 2026Updated 3 months ago
- A steganography tool that encodes files and text using zero-width Unicode characters, making data invisible to the naked eye. Supports AE…☆19May 25, 2026Updated 5 months ago
- Configuración reproducible de Qwen 3.6 35B-A3B IQ2_XXS en una RTX 5070 de 12 GB☆24Sep 20, 2026Updated last month
- Proof-of-concept security demo illustrating how PowerShell can create trusted-looking Windows toast notifications chained together with C…☆18Apr 12, 2026Updated 6 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Python tool for reverse phone number lookups, sending encrypted requests to multiple caller ID app databases.☆17Aug 2, 2025Updated last year
- Behavioral-discipline skill turning an AI agent into a methodical, non-robotic bug-bounty & pentest hunter - 42 always-on rules: scope, c…☆35Aug 18, 2026Updated 2 months ago
- 1000 black hat tools Collected From github☆18Nov 28, 2019Updated 6 years ago
- VeilCreds, a hidden PAM credential harvester☆21Apr 2, 2026Updated 6 months ago
- Secret Key Scanner, Sensitive Directory Finder, Security Headers Analyzer, Risk Scoring, Exportable HTML Reports.☆21Nov 30, 2025Updated 10 months ago
- RunPE implementation with multiple evasive techniques (2)☆14Sep 25, 2025Updated last year
- SafeHarbor revamped with Direct Syscalls using InlineWhispers3☆15Feb 16, 2026Updated 8 months ago
- Binary Ninja Plugins to work with Unpac.Me unpacking service☆13Apr 24, 2025Updated last year
- Block, Bypass, Filter the HBO Ads using AdGuard☆24Mar 21, 2026Updated 7 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Okta Data Collector for BloodHound Community☆17Sep 23, 2026Updated last month
- ADKAVEH - One PowerShell script for Active Directory discovery and safe attack simulation.☆38Sep 28, 2025Updated last year
- CVE-2025-26794: Blind SQL injection in Exim 4.98 (SQLite DBM)- exploit writeup☆14Mar 19, 2025Updated last year
- CVE-2026-45250: FreeBSD 14.4 setcred kernel buffer overflow (LPE)☆22Jul 23, 2026Updated 3 months ago
- Tools for offensive security of NetBackup infrastructures☆48Jun 6, 2023Updated 3 years ago
- Post-Exploitation EVTX Analyzer for BloodHound Mapping☆15May 8, 2026Updated 5 months ago
- Windfall - Unauthenticated RCE exploit chain for Windmill & Nextcloud Flow (CVE-2026-29059). Path traversal + credential leak + PostgreSQ…☆18Apr 7, 2026Updated 6 months ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- ☆15Mar 27, 2026Updated 7 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆65Updated this week
- A PowerShell Module to create a Client and Server Named Pipe Server on Windows Systems☆11Aug 31, 2018Updated 8 years ago
- My solutions in Python for Corelan's Exploit Writing Tutorials☆13Jun 2, 2016Updated 10 years ago
- SearchToolkit is advanced collection of tools, hardwares, resources and cheatsheets useful for Pentester, Red Teamer, Bug Hunter, Forensi…☆39Oct 20, 2026Updated last week
- 32 production-quality KQL detection rules for Microsoft Sentinel, mapped to MITRE ATT&CK for Cloud, credential access, lateral movement, …☆15Aug 1, 2026Updated 2 months ago
- Smuggling C2 comms through links previews☆19Jun 17, 2026Updated 4 months ago
- A rust implementation of HackBrowserData☆17Oct 1, 2025Updated last year
- This is a collection of Worms for educational purposes☆37Jul 17, 2025Updated last year
- Cool looking old Nokia phone simulator.☆33Apr 12, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A fast, native desktop workbench for Azure Data Explorer☆13Updated this week
- A small collector to model out abusable Seamless Single Sign On edges☆15Feb 11, 2026Updated 8 months ago
- ☆15Aug 6, 2026Updated 2 months ago
- Automatically deploying Mythic C2 in Azure using Terraform☆25Jul 3, 2026Updated 3 months ago
- Shellcode loader that hides payload within Egyptian hieroglyphic Unicode characters (U+13000 plane) to evade detection. It decodes the gl…☆16Nov 20, 2025Updated 11 months ago
- Offensive toolage collection for the Windows environment.☆28Dec 4, 2025Updated 10 months ago
- WAF Bypass & Normalization Stress Tester (for Red Teams)☆18Jan 18, 2026Updated 9 months ago