7BitsTeam/EDR-Bypass-demo external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

7BitsTeam/EDR-Bypass-demo

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/7BitsTeam/EDR-Bypass-demo)

Close

7BitsTeam / EDR-Bypass-demoView on GitHubMore

• External links
• Readme badge

Some demos to bypass EDRs or AVs by 78itsT3@m

☆360Jul 6, 2022Updated 3 years ago

Alternatives and similar repositories for EDR-Bypass-demo

Users that are interested in EDR-Bypass-demo are comparing it to the libraries listed below

• yanghaoi / CobaltStrike_CNA

  View on GitHub
  使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。
  ☆554Jan 18, 2022Updated 4 years ago
• crisprss / BypassUserAdd

  View on GitHub
  通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化
  ☆344Apr 10, 2022Updated 3 years ago
• seventeenman / CallBackDump

  View on GitHub
  dump lsass进程工具
  ☆561Jul 20, 2023Updated 2 years ago
• crisprss / Shellcode_Memory_Loader

  View on GitHub
  基于Golang实现的Shellcode内存加载器,共实现3中内存加载shellcode方式,UUID加载,MAC加载和IPv4加载,目前能过主流杀软(包括Windows Defender)
  ☆253Dec 16, 2021Updated 4 years ago
• JDArmy / DCSec

  View on GitHub
  域控安全one for all
  ☆736Sep 9, 2024Updated last year
• Schira4396 / VcenterKiller

  View on GitHub
  一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…
  ☆1,468Apr 25, 2024Updated last year
• aeverj / NimShellCodeLoader

  View on GitHub
  免杀，bypassav，免杀框架，nim，shellcode，使用nim编写的shellcode加载器
  ☆690Feb 11, 2026Updated last month
• safe6Sec / GolangBypassAV

  View on GitHub
  研究利用golang各种姿势bypassAV
  ☆816Apr 11, 2022Updated 3 years ago
• TryGOTry / edit-gencon

  View on GitHub
  geacon:简单适配了一个profile配置文件,可直接拿来修改使用,用于cs上线linux.
  ☆161Aug 3, 2022Updated 3 years ago
• qi4L / Unhooker-go

  View on GitHub
  EDR绕过demo
  ☆294Jan 14, 2024Updated 2 years ago
• Ptkatz / OrcaC2

  View on GitHub
  OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。
  ☆677Dec 30, 2022Updated 3 years ago
• An0nySec / UserAdd

  View on GitHub
  Bypass AV 用户添加
  ☆169Dec 30, 2021Updated 4 years ago
• TideSec / GoBypassAV

  View on GitHub
  整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。
  ☆1,168Aug 23, 2022Updated 3 years ago
• LDrakura / Remote_ShellcodeLoader

  View on GitHub
  远程shellcode加载&权限维持+小功能
  ☆301May 7, 2024Updated last year
• luckyfuture0177 / ReZeroBypassAV

  View on GitHub
  从零开始学免杀
  ☆439Mar 30, 2022Updated 3 years ago
• zha0gongz1 / iscsicpl_bypassUAC

  View on GitHub
  UAC bypass for x64 Windows 7 - 11（无弹窗版）
  ☆281Sep 5, 2022Updated 3 years ago
• passer-W / shc_bypass

  View on GitHub
  内存加载shellcode绕过waf
  ☆209Jul 25, 2022Updated 3 years ago
• veo / wsMemShell

  View on GitHub
  WebSocket 内存马/Webshell，一种新型内存马/WebShell技术
  ☆1,492Apr 10, 2023Updated 2 years ago
• lele8 / SharpUserIP

  View on GitHub
  获取服务器或域控登录日志
  ☆276Sep 8, 2023Updated 2 years ago
• mai1zhi2 / SharpBeacon

  View on GitHub
  CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能
  ☆730Sep 1, 2021Updated 4 years ago
• Ciyfly / microwaveo

  View on GitHub
  将dll exe 等转成shellcode 最后输出exe 可定制加载器模板 支持白文件的捆绑 shellcode 加密
  ☆368Sep 8, 2022Updated 3 years ago
• Goqi / Erfrp

  View on GitHub
  Erfrp-frp二开-免杀与隐藏
  ☆632Dec 4, 2022Updated 3 years ago
• ZanderChang / anti-sandbox

  View on GitHub
  Windows对抗沙箱和虚拟机的方法总结
  ☆401Apr 22, 2020Updated 5 years ago
• evilashz / PigScheduleTask

  View on GitHub
  添加计划任务方法集合
  ☆310Aug 6, 2023Updated 2 years ago
• Rvn0xsy / BadCode

  View on GitHub
  恶意代码逃逸源代码 http://payloads.online
  ☆758Mar 7, 2022Updated 4 years ago
• yzddmr6 / Java-Shellcode-Loader

  View on GitHub
  基于Java实现的Shellcode加载器
  ☆414Sep 4, 2023Updated 2 years ago
• 0x727 / SchTask_0x727

  View on GitHub
  创建隐藏计划任务，权限维持，Bypass AV
  ☆559Sep 1, 2021Updated 4 years ago
• myzxcg / RealBlindingEDR

  View on GitHub
  Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…
  ☆1,295Jun 21, 2024Updated last year
• idiotc4t / sharpwmi

  View on GitHub
  (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆108Jan 8, 2021Updated 5 years ago
• Rvn0xsy / j2osWin

  View on GitHub
  ☆155Jun 18, 2024Updated last year
• wikiZ / RedGuard

  View on GitHub
  RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.
  ☆1,562Aug 20, 2024Updated last year
• safe6Sec / PentestDB

  View on GitHub
  各种数据库的利用姿势
  ☆1,033Jan 3, 2025Updated last year
• 9bie / sshdHooker

  View on GitHub
  One-click injection into the SSHD process to record and send the password for ssh login
  ☆427Mar 12, 2024Updated 2 years ago
• ce-automne / TomcatMemShell

  View on GitHub
  拿来即用的Tomcat7/8/9/10版本Listener/Filter/Servlet内存马，支持注入CMD内存马和冰蝎内存马
  ☆511Aug 31, 2022Updated 3 years ago
• Rvn0xsy / SchtaskCreator

  View on GitHub
  远程创建任务计划工具
  ☆190Apr 23, 2022Updated 3 years ago
• lintstar / LSTAR

  View on GitHub
  LSTAR - CobaltStrike 综合后渗透插件
  ☆1,262Jan 30, 2022Updated 4 years ago
• shmilylty / netspy

  View on GitHub
  netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）
  ☆2,203Jul 25, 2023Updated 2 years ago
• Tas9er / ByPassBehinder4J

  View on GitHub
  冰蝎Java WebShell自动化免杀生成
  ☆783Mar 15, 2022Updated 4 years ago
• uknowsec / SharpSQLTools

  View on GitHub
  SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
  ☆964Aug 5, 2021Updated 4 years ago