MemGuard v2.0 (by @prox0959) - Zero-dependency Windows EDR utility: NT kernel handle table auditor, NTDLL syscall hook detector & credential hardening engine (T1003.001).
☆19Oct 24, 2026Updated 3 weeks ago
Alternatives and similar repositories for MemGuard
Users that are interested in MemGuard are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Mythic Code Signing Wrapper☆21Oct 27, 2026Updated 2 weeks ago
- PoC for WinNotify, demonstrated through a driver mapper, and local privilege escalation.☆43Sep 20, 2026Updated last month
- ☆53Oct 4, 2026Updated last month
- A PoC of User-Defined Reflective Loader for Havoc Framework built with Cystal Palace☆50Oct 18, 2026Updated 3 weeks ago
- SigLens is a Windows binary analysis tool designed to pinpoint the exact regions responsible for antivirus detections. It narrows detecti…☆44Oct 29, 2026Updated 2 weeks ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- IP obfuscation and URL generator.☆47Dec 8, 2025Updated 11 months ago
- Self-hosted multi-engine Sigma detection for event logs☆46Nov 1, 2026Updated last week
- A template for Rust based BOF-PEs☆25Apr 5, 2026Updated 7 months ago
- Demonstration of the DLL party process injection technique☆100Oct 1, 2026Updated last month
- Encode shellcode as XML-looking data. Single-header C library with a two-stage PIC loader example.☆15Feb 11, 2026Updated 9 months ago
- Enumerate user accounts and registered authentication methods via the Microsoft Self-Service Password Reset (SSPR) portal☆60Sep 15, 2026Updated last month
- A newly discovered vulnerable driver, pstrip64.sys (CVE-2026-29923) allows an unprivileged user to escalate privileges to SYSTEM via a cr…☆26Apr 11, 2026Updated 7 months ago
- Collect Defender Telemetry/Logs☆33Nov 4, 2026Updated last week
- A sysmon configuration designed for monitoring RMM solutions from the LOLRMM framework on the OS Microsoft Windows. 10/11☆37Feb 17, 2026Updated 8 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- PUSHAN-style static devirtualizer for Tigress-like VM obfuscation, using VPC-sensitive CFG recovery over Ghidra SLEIGH p-code.☆19Jun 8, 2026Updated 5 months ago
- Set of PoC to abuse Windows minifilters functionality☆113May 1, 2026Updated 6 months ago
- A Beacon Object File (BOF) for Cobalt Strike and Mythic C2 that implements COM hijacking for persistence on Windows systems.☆39Feb 17, 2026Updated 8 months ago
- Compose red team infrastructure and Active Directory ranges on a canvas, then compile to a complete Terraform and Ansible working directo…☆182Nov 6, 2026Updated last week
- Autonomous Windows POC developer from patchwatch diff reports☆160Jul 30, 2026Updated 3 months ago
- Everything related to YARA☆16Apr 18, 2026Updated 6 months ago
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆69Oct 25, 2026Updated 2 weeks ago
- Async BOF to capture KeePass master passwords by detecting and keylogging locked database windows.☆51Jul 23, 2026Updated 3 months ago
- AES-256-CBC with some evasion techniques☆17Aug 31, 2026Updated 2 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Windows Kernel-Mode Shellcode Development Framework (WKMSDF)☆91Aug 1, 2026Updated 3 months ago
- SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smu…☆58Oct 13, 2026Updated last month
- RingKiller — BYOD PoC for vulnerable driver DCRCVDrv.sys. Abuses IOCTL 0x2205C0 to kill arbitrary processes from ring 0 via ZwTerminatePr…☆26Sep 12, 2026Updated 2 months ago
- Minimal Linux kernel fuzzer demo targeting HFS+☆12May 29, 2025Updated last year
- PIC shellcode agent based on Stardust framework and Crystal Palace☆93Nov 4, 2026Updated last week
- Apple style custom ImGui menu. macOS 15 Sequoia widgets for Dear ImGui with a SwiftUI-like C++ API.☆21Sep 30, 2026Updated last month
- Automated YARA rule generation from the Cert Central compromised certificate database.☆17Updated this week
- Windows x64 API hashing library that bypasses EAF and resolves forwarded exports, ordinals, and api-ms-*/ext-ms-* API Set DLLs.☆72Oct 7, 2026Updated last month
- ☆36Nov 1, 2026Updated 2 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Sample WinDbg command & UI extensions.☆15Sep 28, 2026Updated last month
- ☆15Feb 20, 2026Updated 8 months ago
- Just another story about dragons...☆58Nov 7, 2026Updated last week
- Kernel-mode process terminator using a signed BYOVD driver. Works on all Windows 10/11. No offsets, no PDB. Rust.☆114Oct 27, 2026Updated 2 weeks ago
- AyedFuzzer is a small File-Format-Fuzzer with 3 options (File-mutating, WinDbg-interactive monitor, multi-processing) for windows executa…☆17Dec 2, 2024Updated last year
- UI framework for any Minecraft version. Fast shader-based renderer with msdf fonts, rounded corners and batching support.☆20Sep 6, 2026Updated 2 months ago
- AI-powered adversary intelligence☆41Nov 6, 2026Updated last week
Are these results useful?