api0cradle/UltimateAppLockerByPassList resource
The goal of this repository is to document the most common techniques to bypass AppLocker. observed · 2026-08-28
Health v2 · maintenance only
32/100
- Activity 0
- Release rhythm 35
- Longevity 100
Flags: no_releases no_license
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 3340
- days_rel: n/a
- days_push: 1087
- n_releases_24m: 0
Adoption not part of the score
2081 stars · 362 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A curated collection of documented AppLocker bypass techniques for Windows, organized into verified, unverified, generic, and DLL-execution lists in Markdown and reusable YML formats. It also includes sample AppLocker block policies to help teams harden their configurations.
Use cases
- find ways to bypass AppLocker default rules during a red team engagement
- test whether our AppLocker policy blocks known bypass techniques
- get a list of AppLocker bypasses in YML to feed into automated tooling
- harden AppLocker rules by blocking common bypass methods
- learn how insecure default AppLocker configurations are
- find DLL execution techniques that evade application whitelisting
When to choose
- you are doing red team or purple team work against Windows AppLocker
- you need a reference list of known application whitelisting bypasses
- you are a defender validating or hardening AppLocker block rules
When to avoid
- you need an automated bypass tool rather than documentation of techniques
- you are hardening macOS or Linux application controls
- you need actively maintained exploit code with guaranteed updates
Facets
dataset · maturity maintenance
security penetration-testing vulnerability-scanning security penetration-testing windows windows cli applocker bypass-techniques red-team blue-team purple-team powershell defense-evasion yml
1 source
- readme: https://github.com/api0cradle/UltimateAppLockerByPassList · fetched 2026-08-28 · d4ca3d3042a4
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| api0cradle/UltimateAppLockerByPassList | main | 32 |
For agents
markdown · JSON · MCP: product_card(name="api0cradle/UltimateAppLockerByPassList")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem