pwn1sher/KillDefender

Stars
663
Rank 67,991 (Top 2 %)
Language
C++
Created almost 3 years ago
Updated over 2 years ago

Share

pwn1sher

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

A small POC to make defender useless by removing its token privileges and lowering the token integrity

KillDefender

A small POC to make defender useless by removing its token privileges and lowering the token integrity

Usage

killdefender.exe

Preview

Credits

https://elastic.github.io/security-research/whitepapers/2022/02/02.sandboxing-antimalware-products-for-fun-and-profit/article/

1

frostbyte

FrostByte is a POC project that combines different defense evasion techniques to build better redteam payloads

C#

370

2

WMEye

WMEye is a post exploitation tool that uses WMI Event Filter and MSBuild Execution for lateral movement

C#

359

3

CS-BOFs

Collection of CobaltStrike beacon object files

C

100

4

uuid-loader

UUID based Shellcode loader for your favorite C2

C

83

5

RTImplant

Just another casual shellcode native loader

Assembly

24

6

AMSIScanBufBypass

Memory Patching AMSIScanBuffer

fltmc

pwn1sher

CertShooter

Extracting Subdomains from CertSpotter API

Go

2

10

unix_internals

Things I write to learn unix better

C

1

11

nosequeli

Handy script for data ex-filtration with NoSQL Injections

Go

1

pwn1sher/KillDefender

pwn1sher

Reviews

Repository Details

KillDefender

Usage

Preview

Credits

More Repositories