S12cybersecurity/WinDefenderKiller

Stars
402
Rank 107,380 (Top 3 %)
Language
C++
Created over 1 year ago
Updated over 1 year ago

S12cybersecurity/WinDefenderKiller

S12cybersecurity

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Windows Defender Killer | C++ Code Disabling Permanently Windows Defender using Registry Keys

WinDefenderKiller

Windows Defender Killer | C++ Code Disabling Permanently Windows Defender using Registry Keys

YouTube Video: https://youtu.be/67-rp3Y16k8

Let's compile it!

Command:

└─# x86_64-w64-mingw32-g++ -O2 disableWinDef.cpp -o winDefKiller -I/usr/share/mingw-w64/include -L/usr/lib -s -ffunction-sections -fdata-sections -Wno-write-strings -fno-exceptions -fmerge-all-constants -static-libstdc++ -static-libgcc -fpermissive -Wnarrowing -fexceptions

I execute it!

And when i restart it:

If i try to download mimikatz malicious binary:

Not detected by Windows Defender!

RDPCredentialStealer

RDPCredentialStealer it's a malware that steal credentials provided by users in RDP using API Hooking with Detours in C++

RedNeuron

RedNeuron - Framework Creator of Malware focused in attacking Windows but created to execute framework in Linux 👾

NinjaInjector

Classic Process Injection with Memory Evasion Techniques implemantation

S12URootkit

User Mode Windows Rootkit

Admin2Sys

Admin2Sys it's a C++ malware to escalate privileges from Administrator account to NT AUTORITY SYSTEM

ShadowByte-Botnet

Complete Botnet Infrastucture with Malicious C&C Server And Malware Agents to infect Windows OS

GhostShell

Interactive shell to execute commands anonymously using Proxychains and Tor

DumpLsass

C++ Code to perform a MiniDump of lsass.exe

HTTP_POST-Login-BruteForce

HTTP_POST Login BruteForce

RatInject

Rat Inject is C++ Executable to gain Undetectable Persistence in Windows via 4 Registry Keys

Automatic-Blind-SQL-Injection

Automate Blind SQL Injection with Python.

PrivilegeEscalationClass

C++ Privilege Escalation Class to execute Process As Admin from User and Process as NT AUTHORITY SYSTEM from Admin

RansomwareS12

Simple Ransoware to attack Windows 🌟

Backdoor

The best Python Backdoor👌

ExplorerUACStealer

ExplorerUACStealer it's a malware that steal credentials provided by users in UAC Auth in explorer using API Hooking with Detours in C++

WindowInjector

Linux Malware creator to attack Windows System via Reverse Shell with FindWindow Process Code Injection

AD-Pentest

Pentesting Tools to Automatize Active Directory Hacking

bypass_magic_bytes

Bypassing File Upload Restriction using Magic Bytes

LFI-Paradise

Local File Inclusion Scanner and Exploiter

CTF-s

Github repository with Write Up, AutoPwn, Tools, Videos of CTF's from HackTheBox and TryHackMe

Infinite-Backdoors

Bash Script with 4 ways to get persistence in Linux systems WITHOUT root permisions

Pivoting_Enum

Automate All Pivoting System Enumeration with this Bash Script

Scanner_Port

Easy Port Scanner with Python

PDFTypeSpoofing

PDF Icon File Type Spoofer

MalDev-Lib

Malware Libraries focused in help Malware Development

Broke-Login

Simple Python Modular Script to Broke Web Logins

virus_downloader

Easy Python virus framework

ReverseShell-Creator

Very basic Web created with HTML and JavaScript to create Online Payload to do Reverse Shells

pentweb

Bash script that creates directories and files to organize a pentesting

rfi_paradise

Python Scanner and Exploiter of Remote File Inclusion Vulnerabilitie

FTP-Sniffer

MITM to Capture FTP Credentials

ProcList

C++ Script to list active processes with name, PID, Parent PID and User running it

Reverse-Shell-C-PlusPlus

Simple C++ Reverse Shell

AdminX

AdminX it's a Malware to execute process as some users from a Windows OS

FileExtractor

C++ Code to Extract Windows File and Receive in Linux Machine

Decrypt-TeamViewer-Password

Python Script to Decrypt TeamViewer Password

FreeThreadHijacking

Perform Thread Hijacking Shellcode Injection without OpenProcess and OpenThread mapping all the free handles in memory

KeyloggerS12

C++ keylogger to save all the keys pressed into a local txt file

MySQL-DataStealer

Post-Exploitation Tool to Steal MySQL Data, and with persistence extract all data from MySQL table every time that Windows are opened with a Server to receive the extracted Files

JWTq

JWT parser with pretty view

BruteSSH

SSH Bruteforce Basic Script created with C++ to Linux

Groups_PrivEsc

Bash Script to Escalate Privilieges exploiting User Groups

AntiVM

C++ Class with various techniques to detect the execution in a virtualized environment

ThreatHijacking

Threat Hijacking Simple Implementation

ssrf_internal_ports

Python Script to Automate SSRF Internal Ports Discovery

Reflective-DLL

Reflective DLL Injection Implementation

chatpython

amazing simple chat with python🤣

Idor-Hunter

Python Script to Find Idor Vulnerabilities

Automatic_ReverseShell_Creator

Bash Script to Automate Shell conection in Linux Systems

VirtualAlloc-Implementation

My Own VirtualAlloc Implementation to use as alternative unknown for all the defense solutions of VirtualAlloc Win32 API Function

RemoteFunctionPatcher

Patch (block) whatever function you want in a remote process. Adding a ret instruction at the first memory address of this function, the target function will be exited automatically all the times called by this process

AntiDebugging

Anti Debugging C++ Class

SandBox-Bypass

C++ Code to Bypass Sandbox and VM via RAM and Core victim info

SysmonDetox

C++ Class with offensive Red Team techniques to target Sysmon

IATHooking

Import Address Table Hooking Implementation

Web_Enumerator

Python Script to enumerate Direcories Files and the HTTP Methods to Acces to the Discovered Resources

smbc

Samba Client to Start Pentesting Enumeration

User-Enum_Time-Based

User Enumeration in Web Login with Time-Based Server Responses

MapFreeMemoryHandles

Find all type of handles free in Windows Memory

SecurityDetox

Detect and Delete Security Products

BruteMySQL

Bruteforce MySQL Password with C++

GeoLocateJS

A Geolocator made with JavaScript

UserEnum_DiffResponses

Python Script to enumerate Users via Different text Responses

web_enum

Python Script to enumerate webpage

SQLI-Defense

This PHP code is not perfect, but it can be used for a few days

tomcat_revshell

Tomcat Authenticated to Reverse Shell Bash Script

RWXFinder

Find Windows RWX Memory Regions depending on the memory space needed

IPCObjects

C++ Code to perform IPC (Inter Process Connection) to share C++ Objects/Structures with other processes

FreeLoaderInjector

Typical Process Injection using Opened Handle Process, RWX Memory Space

HideProcessesDKOM

Taking advantatge of Direct Kernel Object Manipulation to hide process from the EPROCESS structure

Rate_Limit_Discover

HTTP/HTTPS Discover of Rate Limit Discover

S12Hash

Simple Hash Class to create a new Hash with a various simple math operations