7BitsTeam/EDR-Bypass-demo external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

7BitsTeam/EDR-Bypass-demo

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/7BitsTeam/EDR-Bypass-demo)

Close

7BitsTeam / EDR-Bypass-demoView on GitHubMore

• External links
• Readme badge

Some demos to bypass EDRs or AVs by 78itsT3@m

☆359Jul 6, 2022Updated 4 years ago

Alternatives and similar repositories for EDR-Bypass-demo

Users that are interested in EDR-Bypass-demo are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.

• crisprss / BypassUserAdd

  View on GitHub
  通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化
  ☆338Apr 10, 2022Updated 4 years ago
• seventeenman / CallBackDump

  View on GitHub
  dump lsass进程工具
  ☆556Jul 20, 2023Updated 3 years ago
• yanghaoi / CobaltStrike_CNA

  View on GitHub
  使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。
  ☆552Jan 18, 2022Updated 4 years ago
• crisprss / Shellcode_Memory_Loader

  View on GitHub
  基于Golang实现的Shellcode内存加载器,共实现3中内存加载shellcode方式,UUID加载,MAC加载和IPv4加载,目前能过主流杀软(包括Windows Defender)
  ☆250Dec 16, 2021Updated 4 years ago
• aeverj / NimShellCodeLoader

  View on GitHub
  免杀，bypassav，免杀框架，nim，shellcode，使用nim编写的shellcode加载器
  ☆704Feb 11, 2026Updated 8 months ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• Schira4396 / VcenterKiller

  View on GitHub
  一款针对Vcenter的综合利用工具，包含目前最主流的CVE-2021-21972、CVE-2021-21985以及CVE-2021-22005、One Access的CVE-2022-22954、CVE-2022-22972/31656以及log4j，提供一键上传webs…
  ☆1,482Apr 25, 2024Updated 2 years ago
• JDArmy / DCSec

  View on GitHub
  域控安全one for all
  ☆738Sep 9, 2024Updated 2 years ago
• safe6Sec / GolangBypassAV

  View on GitHub
  研究利用golang各种姿势bypassAV
  ☆813Apr 11, 2022Updated 4 years ago
• LDrakura / Remote_ShellcodeLoader

  View on GitHub
  远程shellcode加载&权限维持+小功能
  ☆296May 7, 2024Updated 2 years ago
• Ptkatz / OrcaC2

  View on GitHub
  OrcaC2是一款基于Websocket加密通信的多功能C&C框架，使用Golang实现。
  ☆676Dec 30, 2022Updated 3 years ago
• qi4L / Unhooker-go

  View on GitHub
  EDR绕过demo
  ☆289Jan 14, 2024Updated 2 years ago
• TryGOTry / edit-gencon

  View on GitHub
  geacon:简单适配了一个profile配置文件,可直接拿来修改使用,用于cs上线linux.
  ☆157Aug 3, 2022Updated 4 years ago
• lele8 / SharpUserIP

  View on GitHub
  获取服务器或域控登录日志
  ☆278Sep 8, 2023Updated 3 years ago
• An0nySec / UserAdd

  View on GitHub
  Bypass AV 用户添加
  ☆167Dec 30, 2021Updated 4 years ago
• Deploy to Railway using AI coding agents - Free Credits Offer • Ad
  Use Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
• TideSec / GoBypassAV

  View on GitHub
  整理了基于Go的16种API免杀测试、8种加密测试、反沙盒测试、编译混淆、加壳、资源修改等免杀技术，并搜集汇总了一些资料和工具。
  ☆1,185Aug 23, 2022Updated 4 years ago
• mai1zhi2 / SharpBeacon

  View on GitHub
  CobaltStrike Beacon written in .Net 4 用.net重写了stager及Beacon，其中包括正常上线、文件管理、进程管理、令牌管理、结合SysCall进行注入、原生端口转发、关ETW等一系列功能
  ☆728Sep 1, 2021Updated 5 years ago
• Rvn0xsy / BadCode

  View on GitHub
  恶意代码逃逸源代码 http://payloads.online
  ☆751Mar 7, 2022Updated 4 years ago
• veo / wsMemShell

  View on GitHub
  WebSocket 内存马/Webshell，一种新型内存马/WebShell技术
  ☆1,486Apr 10, 2023Updated 3 years ago
• Ciyfly / microwaveo

  View on GitHub
  将dll exe 等转成shellcode 最后输出exe 可定制加载器模板 支持白文件的捆绑 shellcode 加密
  ☆364Sep 8, 2022Updated 4 years ago
• passer-W / shc_bypass

  View on GitHub
  内存加载shellcode绕过waf
  ☆206Jul 25, 2022Updated 4 years ago
• ZanderChang / anti-sandbox

  View on GitHub
  Windows对抗沙箱和虚拟机的方法总结
  ☆410Apr 22, 2020Updated 6 years ago
• 0x727 / SchTask_0x727

  View on GitHub
  创建隐藏计划任务，权限维持，Bypass AV
  ☆558Sep 1, 2021Updated 5 years ago
• Goqi / Erfrp

  View on GitHub
  Erfrp-frp二开-免杀与隐藏
  ☆633Dec 4, 2022Updated 3 years ago
• Serverless GPU API endpoints on Runpod - Get Bonus Credits • Ad
  Skip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
• mai1zhi2 / ShellCodeFramework

  View on GitHub
  绕3环的shellcode免杀框架
  ☆569Mar 19, 2021Updated 5 years ago
• uknowsec / SharpSQLTools

  View on GitHub
  SharpSQLTools 和@Rcoil一起写的小工具，可上传下载文件，xp_cmdshell与sp_oacreate执行命令回显和clr加载程序集执行相应操作。
  ☆974Aug 5, 2021Updated 5 years ago
• zha0gongz1 / iscsicpl_bypassUAC

  View on GitHub
  UAC bypass for x64 Windows 7 - 11（无弹窗版）
  ☆273Sep 5, 2022Updated 4 years ago
• yzddmr6 / Java-Shellcode-Loader

  View on GitHub
  基于Java实现的Shellcode加载器
  ☆415Sep 4, 2023Updated 3 years ago
• luckyfuture0177 / ReZeroBypassAV

  View on GitHub
  从零开始学免杀
  ☆435Mar 30, 2022Updated 4 years ago
• evilashz / PigScheduleTask

  View on GitHub
  添加计划任务方法集合
  ☆313Aug 6, 2023Updated 3 years ago
• lintstar / LSTAR

  View on GitHub
  LSTAR - CobaltStrike 综合后渗透插件
  ☆1,270Jan 30, 2022Updated 4 years ago
• Rvn0xsy / j2osWin

  View on GitHub
  ☆153Jun 18, 2024Updated 2 years ago
• myzxcg / RealBlindingEDR

  View on GitHub
  Remove AV/EDR Kernel ObRegisterCallbacks、CmRegisterCallback、MiniFilter Callback、PsSetCreateProcessNotifyRoutine Callback、PsSetCreateThrea…
  ☆1,323Jun 21, 2024Updated 2 years ago
• Managed hosting for WordPress and PHP on Cloudways • Ad
  Managed hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
• shmilylty / netspy

  View on GitHub
  netspy是一款快速探测内网可达网段工具（深信服深蓝实验室天威战队强力驱动）
  ☆2,237Jul 25, 2023Updated 3 years ago
• safe6Sec / PentestDB

  View on GitHub
  各种数据库的利用姿势
  ☆1,030Jan 3, 2025Updated last year
• wikiZ / RedGuard

  View on GitHub
  RedGuard is a C2 front flow control tool,Can avoid Blue Teams,AVs,EDRs check.
  ☆1,571Aug 20, 2024Updated 2 years ago
• idiotc4t / sharpwmi

  View on GitHub
  (批量化改造)sharpwmi是一个基于rpc的横向移动工具，具有上传文件和执行命令功能。
  ☆109Jan 8, 2021Updated 5 years ago
• Tas9er / ByPassBehinder4J

  View on GitHub
  冰蝎Java WebShell自动化免杀生成
  ☆776Mar 15, 2022Updated 4 years ago
• evilashz / SharpADUserIP

  View on GitHub
  提取DC日志，快速获取域用户对应IP地址
  ☆311Mar 21, 2022Updated 4 years ago
• Rvn0xsy / SchtaskCreator

  View on GitHub
  远程创建任务计划工具
  ☆187Apr 23, 2022Updated 4 years ago