Rex Shellcode Loader for AV/EDR evasion
☆36Apr 7, 2024Updated 2 years ago
Alternatives and similar repositories for RexLdr
Users that are interested in RexLdr are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Evasive shellcode loader with indirect syscalls, Thread name-calling allocation, PoolParty injection☆10Feb 26, 2025Updated last year
- BloodyAv is Custom Shell Code loader to Bypass Av and Edr.☆15Mar 21, 2022Updated 4 years ago
- 一个普通的BOF用来BypassUAC☆21Apr 6, 2024Updated 2 years ago
- ☆63Apr 4, 2024Updated 2 years ago
- Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell onto webserver☆13Dec 27, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- inspired by mr d0x filefix☆16Feb 4, 2026Updated 7 months ago
- EDR/AV Simulation for Malware Development☆13Oct 21, 2023Updated 2 years ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆16Aug 14, 2023Updated 3 years ago
- 密码生成工具、password maker、password generator☆15Apr 20, 2024Updated 2 years ago
- 个人学习使用，二开DcRAT，主要是增加了功能性插件☆17Jan 26, 2024Updated 2 years ago
- Event Tracing for Windows EDR bypass in Rust (usermode)☆39Jun 9, 2024Updated 2 years ago
- Massayo is a small proof-of-concept Rust library which removes AV/EDR hooks in a given system DLL☆63Sep 12, 2022Updated 4 years ago
- Another approach of Threadless injection discovered by @_EthicalChaos_ in c that loads a module into the target process and stomps it, an…☆188Aug 2, 2023Updated 3 years ago
- AV/EDR killer using BYOVD technique☆43Sep 27, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Indirect Syscall invocation via thread hijacking☆27May 5, 2023Updated 3 years ago
- Command line & PPID spoofing☆31Apr 15, 2023Updated 3 years ago
- TangGo的自定义界面工具模块设计和分享的第三方工具界面☆10Nov 27, 2024Updated last year
- 内存加载DLL 支持VMP最大加密☆13Aug 11, 2020Updated 6 years ago
- A single byte modification in the kernel memory bypasses and disables all core functions of the AV/EDR security solutions☆18Aug 26, 2025Updated last year
- Mockingjay process self injection POC☆54Aug 8, 2023Updated 3 years ago
- Replace the .txt section of the current loaded modules from \KnownDlls\☆307Sep 28, 2022Updated 3 years ago
- Bypassing AV, EDR, Application Whitelisting and ASR Rules☆13Apr 18, 2023Updated 3 years ago
- Titan: A generic user defined reflective DLL for Cobalt Strike☆84Nov 20, 2022Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- HexRaysPyTools merged! (@NyaMisty @oopsmishap @Tim-Sobolev @OrbitOn-line)☆17Dec 15, 2025Updated 9 months ago
- Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"☆31Jan 14, 2023Updated 3 years ago
- A Beacon Object File for decrypting Chrome App-Bound Encryption masterkeys in-memory via Cobalt Strike☆19Jul 14, 2025Updated last year
- Probably the easiest way to setup new beacon notifications in Cobalt Strike☆10Jan 7, 2022Updated 4 years ago
- A new technique that can be used to bypass memory scanners. This can be useful in hiding problematic code (such as reflective loaders imp…☆359Oct 7, 2024Updated last year
- 无Windows API的新型恶意程序：自缺陷程序利用堆栈溢出的隐匿稳定攻击技术研究，A new type of malicious program without Windows API☆88Mar 27, 2025Updated last year
- reflectively load and execute PEs locally and remotely bypassing EDR hooks☆169Jan 4, 2024Updated 2 years ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆50May 8, 2024Updated 2 years ago
- Two C# RunPE's capable of x86 and x64 injections☆11Dec 2, 2018Updated 7 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- narly.js - print binary protections with Windbg JS (/SafeSEH, /GS, ASLR, etc.)☆16Nov 14, 2022Updated 3 years ago
- This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for loc…☆55May 8, 2023Updated 3 years ago
- Remap ntdll.dll using only NTAPI functions with a suspended process☆28Apr 13, 2025Updated last year
- A WIP shellcode loader tool which bypasses AV/EDR, coded in C++, and equipped with a minimal builder.☆88Sep 27, 2025Updated last year
- Load the evilDLL from socket connection without touch disk☆15Aug 27, 2021Updated 5 years ago
- ☆12Jun 27, 2019Updated 7 years ago
- some AV / EDR / analysis studies☆10May 21, 2023Updated 3 years ago