
Disable-TamperProtection
A POC to disable TamperProtection and other Defender / MDE components
adversarial-attackpenetration-testingpost-exploitation+1
260

A POC to disable TamperProtection and other Defender / MDE components

A way to delete a locked file, or current running executable, on disk.

Permanently disable EDRs as local admin

BIG-IP iControl REST vulnerability CVE-2022-1388 PoC

Oracle VirtualBox Elevation of Privilege (Local Privilege Escalation) Vulnerability

Proof of concept for CVE-2022-31814


Manage Shadows Copies via the VSS API using C#, C++, Crystal or Python. Working on Windows 11

C# utility that uses WMI to run "cmd.exe /c netstat -n", save the output to a file, then use SMB to read and delete the file remotely

UAC Bypass for windows