ThreatCheck vs DefenderCheck

ThreatCheck

Identifies the bytes that Microsoft Defender / AMSI Consumer flags on. (by rasta-mouse)

Suggest topics

Source Code

Suggest alternative

Edit details

DefenderCheck

Identifies the bytes that Microsoft Defender flags on. (by matterpreter)

evasion research-tool C#

Source Code

Suggest alternative

Edit details

InfluxDB - Power Real-Time Data Analytics at Scale

Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

www.influxdata.com

featured

SaaSHub - Software Alternatives and Reviews

SaaSHub helps you find the best software and product alternatives

www.saashub.com

featured

ThreatCheck		DefenderCheck
	Project
3	Mentions	3
929	Stars	2,143
-	Growth	-
0.0	Activity	2.5
2 months ago	Latest Commit	8 months ago
C#	Language	C#
-	License	BSD 3-clause "New" or "Revised" License

The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

ThreatCheck

Posts with mentions or reviews of ThreatCheck. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-09-13.

BEST KALI TOOL TO MAKE UNDETECTABLE BACKDOOR 2022?
6 projects | /r/Hacking_Tutorials | 13 Sep 2022

ThreatCheck -- tool that can show you exactly what bytes in an executable are triggering windows defender and a few other AV solutions.
Anyone else having trouble bypassing Defender since yesterday?
3 projects | /r/redteamsec | 24 Sep 2021

Also ThreatCheck by RastaMouse https://github.com/rasta-mouse/ThreatCheck
How does a hacker test his malware against his target without getting caught?
1 project | /r/AskNetsec | 28 Jan 2021

This is just one tool in the toolbox. But it's only for Defender. Other EDR solutions may still detect your payload. https://github.com/rasta-mouse/ThreatCheck

DefenderCheck

Posts with mentions or reviews of DefenderCheck. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2021-09-24.

DefenderCheck - Identifies the bytes that Microsoft Defender flags on.
1 project | /r/CKsTechNews | 4 Oct 2022
DefenderCheck: Identifies the bytes that Microsoft Defender flags on
1 project | news.ycombinator.com | 4 Oct 2022
Anyone else having trouble bypassing Defender since yesterday?
3 projects | /r/redteamsec | 24 Sep 2021

Try using Defendercheck to see what the offending bytes are. Also, have you tried any AMSI bypasses?

What are some alternatives?

When comparing ThreatCheck and DefenderCheck you can also consider the following projects:

Chimera - Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

mortar - evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

donut - Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

awesome-dotnet-core - :honeybee: A collection of awesome .NET core libraries, tools, frameworks and software

Shhhloader - Syscall Shellcode Loader (Work in Progress)

Roslyn - The Roslyn .NET compiler provides C# and Visual Basic languages with rich code analysis APIs.

obfuscator

SysWhispers2 - AV/EDR evasion via direct system calls.

Avalonia - Develop Desktop, Embedded, Mobile and WebAssembly apps with C# and XAML. The most popular .NET UI client technology