18961 matches found
atlant-harden
AtlantHarden — Windows, Browser & Office Security Hardening Tool AtlantHarden is a comprehensive Windows 10/11 security hardening application with a modern, professional UI. It applies 606 hardening settings — including 354 DISA STIG controls across Windows 11, Edge, Chrome, Firefox, and Office 3...
Nidhogg
Nidhogg Nidhogg is a multi-functional rootkit to showcase the variety of operations that can be done from kernel space. The goal of Nidhogg is to provide an all-in-one and easy-to-use rootkit with multiple helpful functionalities for operations. Besides that, it can also easily be integrated with...
pytm
pytm: A Pythonic framework for threat modeling Introduction Traditional threat modeling too often comes late to the party, or sometimes not at all. In addition, creating manual data flows and reports can be extremely time-consuming. The goal of pytm is to shift threat modeling to the left, making...
w11_shadow_copies
Windows 11 Shadow Copies On Windows 11, the built-in vssadmin can list, delete or resize Shadow Copies, but Microsoft removed the ability to create them. However, you can still do it by interacting directly with the Volume Shadow Copy Service VSS API, which I already used in my other tool SAMDump...
TABPE
TABPE What is TABPE? TABPE a combination of TABriz + PE - Tabriz is my hometown, and I named this project after my love for my city is an open, structured dataset containing information about all PE files Windows executables including .exe, .dll, .sys, etc., on clean, fully updated versions of...
RoguePlanet
RoguePlanet RoguePlanet Windows Defender Vulnerability Welcome back everyone !!! The exploit is a race condition, so it's a hit or miss. I have managed to get a 100% success rate on some machines while it struggled to work on others. The exploit has been tested in Windows 11 Official channel +...
gdid-reversal
Full writeup of the Windows GDID Global Device Identifier fully reverse engineered -8a2be2 -0078d6 How Microsoft's "Global Device Identifier", the persistent Windows fingerprint named in the July 2026 Scattered Spider complaint, is actually generated, stored, and transmitted. TL;DR !NOTE Listed...
GDRVLoader
GDRVLoader - Cargar controladores sin firmar en Windows 10-11 Originalmente basado en https://github.com/fengjixuchui/gdrv-loader pero con mejoras y soporte para las últimas versiones de Windows. Características añadidas Carga controladores sin firmar en Windows 10-11 sin ser detectado por...
CVE-2023-36003
CVE-2023-36003: PoC de bypass de Windows Defender Exploit Protection Este repositorio contiene una prueba de concepto PoC para CVE-2023-36003 , una vulnerabilidad crítica de bypass de funciones de seguridad que afecta a Windows Defender Exploit Protection. Información general CVE-2023-36003 es un...
CVE-2024-21338-x64-build-
CVE-2024-21338 Vulnerabilidad de escalada de privilegios local de Administrador a Kernel en sistemas operativos Windows 10 y Windows 11 con HVCI habilitado...
EDR-Freeze
EDR-Freeze Esta es una herramienta que explota la vulnerabilidad de software de WerFaultSecure para suspender los procesos de EDRs y antimalware sin necesidad de utilizar el método de ataque BYOVD Bring Your Own Vulnerable Driver. EDR-Freeze opera en modo usuario, por lo que no necesitas instalar...
CVE-2019-1221
PoC exploit para CVE-2019-1221 Se perdió el origen de este PoC Apunta a Internet Explorer 11 de 32 bits en Windows 10 x64 hasta RS5 Usa "VBScript.Encode" / CVE-2019-0768 para que el exploit funcione hasta RS5 Ejecuta calc usando WinExec...
CVE-2025-24076
CVE-2025-24076 Vulnerabilidad de Elevación de Privilegios en el Servicio de Dispositivos Cruzados de Microsoft Windows Exploit Resumen Este script explota una vulnerabilidad en el Servicio de Dispositivos Cruzados de Windows que permite la escalada de privilegios en sistemas Windows 11 , Windows...
debian11-dirty_pipe-patcher
debian11-dirtypipe-patcher Este proyecto aún está en desarrollo Dado que Debian 11 aún viene con la versión del kernel 5.10, la cual es vulnerable a la Vulnerabilidad Dirty Pipe, este script está hecho para compilar e instalar manualmente la versión del kernel 5.18 que no es vulnerable. Uso 1...
VEN0m-Ransomware
VEN0m Ransomware https://github.com/user-attachments/assets/5a1fc9b5-a647-41f6-a152-7b9d97381adc This project demonstartes how a legit, and signed driver can be weponized to evade defenses and deploy ransomware simulating a real cyberattack. 🚨 Tested on Windows 11 Pro 24H2. Fully undetectable as ...
evtx-baseline
evtx-baseline Un repositorio que aloja registros evtx de ejemplo tipo goodware que contienen instalaciones de software de muestra e interacción básica de usuario Donaciones win10-client.tgz por @phantinuss win11-client.tgz por @frack113 win7-x86.tgz por @pH-T win2022-evtx.tgz por @Neo23x0...
RvbbitSafe
RvbbitSafe: The Hacker's Nightmare – A Six-Fortress Anti-Ransomware Architecture for Windows 🛡️ Overview RvbbitSafe is a research prototype demonstrating a paradigm shift in ransomware defense. It's an active, multi-layered fortress that combines hardware virtualization, AI-driven deception,...
UPnPHostFileRead
Description Local arbitrary file read PoC exploit for the Windows UPnP Device Host service. Reads an arbitrary file in the context of LOCAL SERVICE. Tested against Windows 11 Pro build 26200.8457. Reported to Microsoft. Assessed as "not a vulnerability". How to Build 1. Clone the repository. 2...
java-remote-class-loader
This tool allows you to send Java bytecode in the form of class files to your clients or potential targets to load and execute using Java ClassLoader together with Reflect API. The client receives the class file from the server and return the respective execution output. Payloads must be written ...