Pinned Loading

1. RDPCredentialStealer RDPCredentialStealer Public

   RDPCredentialStealer it's an implant that steal credentials provided by users in RDP using API Hooking with Detours in C++

   C++ 286 39

2. PIDMutation PIDMutation Public

   Process ID Mutator via BYOVD Kernel R/W

   C++ 21 6

3. HandleRedirect HandleRedirect Public

   Handle Redirect via BYOVD Kernel Read/Write

   C++ 19 3

4. S12URootkit S12URootkit Public

   User Mode Windows Rootkit

   C++ 85 21

5. WinDefenderKiller WinDefenderKiller Public

   Windows Defender Killer | Registry-Based Disablement + BYOVD Process Termination (C++)

   C 564 75

6. LogonStealer LogonStealer Public

   Abuses the Credential Provider interface to steal plaintext passwords from logonui.exe via CredProvDataModel.dll hooks

   C++ 61 17