0x00Check / Amaterasu
Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Process Explorer driver to kill a process's handles from kernel mode.
☆71Updated last year
Alternatives and similar repositories for Amaterasu:
Users that are interested in Amaterasu are comparing it to the libraries listed below
- ☆47Updated 11 months ago
- vehsyscall:a syscall project that may bypass EDR☆54Updated last year
- Alternative Shellcode Execution Via Callbacks Rewrite In C#☆88Updated last year
- more conveniently Visual-Studio-BOF-template☆61Updated last year
- Evasive loader to bypass static detection☆58Updated last year
- ☆91Updated 3 years ago
- Shellcode Reductio Entropy Tools☆65Updated last year
- Beacon compiled using clang☆63Updated 2 years ago
- CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback☆68Updated 2 years ago
- A Cobalt Strike memory evasion loader for redteamers☆99Updated 2 years ago
- Load shellcode via syscall☆47Updated 3 years ago
- ReturnGate, just like HellsGate.☆66Updated 2 years ago
- Efficient RAT signature locator for bypassing AV/EDR, supporting static scanning and memory scanning.☆36Updated 5 months ago
- ☆26Updated last year
- ☆40Updated last year
- Beacon Object File implementation of pwn1sher's KillDefender☆65Updated 2 years ago
- An implementation of an indirect system call☆123Updated last year
- use aswArPot.sys to kill process☆67Updated 2 years ago
- ☆96Updated last year
- Loading Fileless Remote PE from URI to memory with argument passing and ETW patching and NTDLL unhooking and No New Thread technique☆63Updated 2 years ago
- Binary Hollowing☆72Updated 6 months ago
- It stinks☆102Updated 2 years ago
- Take a screenshot without injection for Cobalt Strike☆183Updated last year
- Help red teams find opsec processes during engagements☆36Updated 3 months ago
- Bypass Detection By Randomising ROR13 API Hashes☆135Updated 3 years ago
- ☆237Updated last year
- Dumping LSASS with a duplicated handle from custom LSA plugin☆200Updated 3 years ago
- beta☆115Updated 6 months ago
- frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can …☆51Updated last year
- Cobalt Strike BOF that Add an admin user☆71Updated 2 years ago