Alternatives and similar repositories for EDR-Bypass-demo:

Users that are interested in EDR-Bypass-demo are comparing it to the libraries listed below

• yanghaoi / CobaltStrike_CNA
  使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。
  ☆533Updated 2 years ago
• huaigu4ng / SysWhispers3WinHttp
  Syscall免杀
  ☆504Updated 5 months ago
• seventeenman / CallBackDump
  dump lsass进程工具
  ☆548Updated last year
• testxxxzzz / geacon_pro
  重构了Cobaltstrike Beacon，行为对国内主流杀软免杀，支持4.1以上的版本。 A cobaltstrike Beacon bypass anti-virus, supports 4.1+ version.
  ☆273Updated 2 years ago
• LDrakura / Remote_ShellcodeLoader
  远程shellcode加载&权限维持+小功能
  ☆292Updated 7 months ago
• HackerCalico / Magic_C2
  红队 C2 框架，使用 No X Loader 技术。Red Team C2 Framework, using No X Loader technology.
  ☆304Updated 3 months ago
• xf555er / ShellcodeLoader
  This is my FirstRepository
  ☆314Updated last year
• lintstar / CS-AutoPostChain
  基于 OPSEC 的 CobaltStrike 后渗透自动化链
  ☆409Updated 9 months ago
• 0x727 / SchTask_0x727
  创建隐藏计划任务，权限维持，Bypass AV
  ☆521Updated 3 years ago
• crisprss / Shellcode_Memory_Loader
  基于Golang实现的Shellcode内存加载器,共实现3中内存加载shellcode方式,UUID加载,MAC加载和IPv4加载,目前能过主流杀软(包括Windows Defender)
  ☆254Updated 3 years ago
• burpheart / CVE-2022-39197-patch
  CVE-2022-39197 漏洞补丁. CVE-2022-39197 Vulnerability Patch.
  ☆315Updated 2 years ago
• HackerCalico / No_X_BOF
  Loading BOF & ShellCode without executable permission memory.
  ☆357Updated last month
• Mephostophiles / PengCode
  EXE转ShellCode工具
  ☆179Updated 2 years ago
• crisprss / BypassUserAdd
  通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化
  ☆333Updated 2 years ago
• qi4L / Unhooker-go
  EDR绕过demo
  ☆287Updated 11 months ago
• pureqh / bypassAV
  免杀shellcode加载器
  ☆449Updated 3 years ago
• jiushill / csplugin
  自己开的cs插件
  ☆243Updated last year
• Getshell / C2
  C2-下一代RAT
  ☆330Updated 4 months ago
• lzzbb / Adinfo
  域信息收集工具
  ☆386Updated 2 years ago
• wjlab / Darksteel
  域内自动化信息搜集利用工具
  ☆417Updated last year
• berryalen02 / PECracker
  针对PE文件的分离的攻防对抗工具，红队、研究者的好帮手。目前支持文件头伪装、证书区段感染。A no-kill confrontation tool for the separation of PE files, a good helper for red teams and…
  ☆241Updated 3 months ago
• coleak2021 / evilhiding
  shellcode loader,bypassav,免杀，一款基于python的shellcode免杀加载器
  ☆133Updated last year
• TryGOTry / DogCs4.4
  cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)
  ☆574Updated last year
• Axx8 / Bypass_AV
  Bypass_AV msf免杀，ShellCode免杀加载器 ，免杀shellcode执行程序 ，360&火绒&Windows Defender
  ☆223Updated 2 years ago
• F3eev / SharkExec
  内网渗透|红队工具|C#内存加载|cobaltstrike
  ☆295Updated 2 years ago
• Peithon / JustC2file
  Burp插件，Malleable C2 Profiles生成器；可以通过Burp代理选中请求，生成Cobalt Strike的profile文件(CSprofile)
  ☆272Updated 2 years ago