redsun

Here are 3 public repositories matching this topic...

Letlaka / redsun-bluehammer-undefend-detection-pack

Microsoft Defender XDR KQL detections for RedSun, BlueHammer, UnDefend, and CVE-2026-33825-related Defender abuse behaviors.

privilege-escalation windows-security detection-engineering microsoft-defender advanced-hunting redsun microsoft-defender-xdr defender-xdr kql-threathunting threat-detection-windows bluehammer undefend cve-2026-33825

Updated May 5, 2026

tc4dy / CVE-2026-41091-PoC-Exploit

Star

CVE-2026-41091 RedSun | Microsoft Defender LPE exploit. Low-privileged users gain NT AUTHORITY\SYSTEM - via Cloud Files API + NTFS junction trickery. Forces Defender to write malicious payloads to System32 with SYSTEM rights - Actively exploited in wild. CVSS 7.8. Patch: Defender Engine 1.1.26040.8. Educational & Legal uses only.

windows proof-of-concept exploit toolkit windows-server exploitation hackpack blueteam redteam windows-vulnerability windows-cve redsun cve-2026-41091

Updated Sep 29, 2026
C++

notthemystery / PassF0rge

Star

Password Recovery Tool Based on CopyFail and RedSun as Main Exploits

python windows linux exploit flutter password-recovery redsun clanguageprojects copyfail

Updated Jun 23, 2026
C++

Add this topic to your repo

To associate your repository with the redsun topic, visit your repo's landing page and select "manage topics."

Learn more