AbdouRoumi / MalwareEvasionTechniques
Research project showcasing various malware evasion techniques used to bypass AVs and EDRs, continuously updated with new methods.
☆24Updated last month
Alternatives and similar repositories for MalwareEvasionTechniques:
Users that are interested in MalwareEvasionTechniques are comparing it to the libraries listed below
- A custom implementation of GetProcAddress, often used in malware to evade detection by bypassing standard API resolution methods☆14Updated last month
- Research in progress: A malware that abuses the GPU to accelerate the decryption process.☆20Updated last month
- Native API injector☆25Updated 5 months ago
- This Malware is an application for MalwareEvasionTechniques repo .I used in it Registery staging in two modes R/W and I combined it with …☆14Updated 5 months ago
- A Windows string hashing toolkit for security research and malware analysis.Research implementation of malware-focused algorithms from V…☆14Updated last month
- A powerful PE file inspector for analyzing Portable Executable binaries, providing detailed insights into their structure, headers, and p…☆18Updated last month
- ☆13Updated 5 months ago
- A repository showcasing payload execution control using mutexes, semaphores, and events in Windows, for educational purposes.☆15Updated 2 months ago
- ☆14Updated 5 months ago
- Malware evasion technique by manipulating process command-line arguments to hide the actual executed payload, used to evade the manual de…☆14Updated last month
- This is a repo that contains 2 techniques : Local mapping injection and Remote injection technique , MITRE ID T1055☆15Updated 4 months ago
- A custom implementation of GetModuleHandle, often used in malware to evade detection by bypassing standard API resolution methods☆16Updated last month
- This is a malware that i used in it remote process injection technique, it scans for processes chooses the one you named and inject shell…☆17Updated 5 months ago
- NTAPI Anti-Debugging Checker and Patcher is a Windows-based tool designed for research purposes, demonstrating how to detect and manipula…☆16Updated 5 months ago
- Implements dynamic Windows API resolution via hashing techniques to evade detection. Inspired by techniques mapped to MITRE ATT&CK T1055…☆15Updated last month
- Function Stomping (MITRE ATT&CK ID: T1055.012) — Advanced injection technique overwriting legitimate functions with custom payloads to ev…☆16Updated last month
- This is an application for both MalwareScanner and MalwareStaging☆15Updated 5 months ago
- Code injection via Asynchronous Procedure Calls to bypass Windows defenses. Mapped to MITRE ATT&CK T1055.004.(Process Injection: Asynchro…☆21Updated 4 months ago
- nexos source files made by @samdem-ai☆12Updated 4 months ago
- sharing some writeups for ctf challs :)☆11Updated 10 months ago
- Portfolio inspired from nest js official website using React and Material UI☆13Updated 2 months ago
- nexos source files made by @samdem-ai☆20Updated 4 months ago
- ☆20Updated 11 months ago
- ☆25Updated 8 months ago
- ☆10Updated 4 months ago
- JobsAPI created with NodeJS and MongoDB while learning from Coding Addict https://www.youtube.com/watch?v=rltfdjcXjmk&t=8690s☆10Updated 2 years ago