This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR products using techniques that negate or circumvent detection techniques used by these products.
☆14Nov 14, 2023Updated 2 years ago
Alternatives and similar repositories for Capstone-Project
Users that are interested in Capstone-Project are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Oct 31, 2023Updated 3 years ago
- ☆12Aug 24, 2022Updated 4 years ago
- Cobalt Strike notifications via NTFY.☆15Sep 24, 2024Updated 2 years ago
- A lsass dump tool using MiniDumpWriteDump & syscall(NtOpenProcess) technique. only tested on windows 11 with defender enabled:-)☆17Oct 11, 2023Updated 3 years ago
- 免杀绕过某60，过核晶，vt爆6个☆13May 1, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- How to dump lsass via spoolsv with DLL side-loading.☆14Nov 29, 2025Updated 11 months ago
- ApexLdr is a DLL Payload Loader written in C☆117Jul 17, 2024Updated 2 years ago
- ☆43Feb 18, 2025Updated last year
- 渗透测试人员可以通过此BOF，将非托管 Windows可执行文件加载到Beacon内存中并执行它们，检索输出并将其呈现在 Beacon 控制台中☆13Mar 18, 2025Updated last year
- An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.☆16Nov 1, 2023Updated 3 years ago
- Bl0ck: a tool to interrupt the transmission of QoS Data frames in Wi-Fi 5 and 6 networks☆13Sep 15, 2025Updated last year
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆84Aug 13, 2024Updated 2 years ago
- Process Injection Techniques using DIrect and Indirect Syscalls☆11Dec 6, 2024Updated last year
- Packer is a compact, fast and crosss-platform serialization library for store data in a buffer☆23Aug 5, 2023Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- x64 Registration-Free In-Process COM Automation Server.☆51Nov 28, 2022Updated 3 years ago
- Pathbyter is a lightning fast proof-of-concept ransomware that uses RSA wrapped AES, multiprocessing, in memory key encryption, appends e…☆26Sep 25, 2023Updated 3 years ago
- ☆222Mar 10, 2024Updated 2 years ago
- 新的注入方式☆11Sep 30, 2018Updated 8 years ago
- impersonate trustedinstaller by fiddling with tokens☆13Aug 30, 2021Updated 5 years ago
- ☆13Jul 24, 2022Updated 4 years ago
- A basic C2 framework written in C☆61Jul 7, 2024Updated 2 years ago
- Headers for linking your software with ntdll.dll☆15Nov 4, 2020Updated 6 years ago
- Using SetWindowHookEx for preinjected DLL's☆58Aug 25, 2022Updated 4 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Windows native DLL injection library written in C# that supports several methods of injection.☆11Dec 17, 2018Updated 7 years ago
- A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM☆20Updated this week
- PoC for downloading data by injecting into processes to evade firewalls☆36Nov 29, 2025Updated 11 months ago
- Cortex EDR Ransomware protection Bypass☆27Feb 8, 2025Updated last year
- WhatHitMe is a Python3 tool which provides the possible Groups and their attributed Campaigns that may have attacked you in an incident, …☆18Jun 29, 2023Updated 3 years ago
- A stealthy, assembly-based tool for secure function address resolution, offering a robust alternative to GetProcAddress.☆74Mar 6, 2024Updated 2 years ago
- ☆14Jun 2, 2024Updated 2 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- ☆16Jun 23, 2024Updated 2 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆15Dec 30, 2023Updated 2 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆15Jan 7, 2023Updated 3 years ago
- ☆84Aug 18, 2022Updated 4 years ago
- Simple ETW unhook PoC. Overwrites NtTraceEvent opcode to disable ETW at Nt-function level.☆57Feb 29, 2024Updated 2 years ago
- ☆52Jun 12, 2026Updated 4 months ago
- Evasive loader to bypass static detection☆58Jan 15, 2024Updated 2 years ago
- improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys☆49Mar 10, 2023Updated 3 years ago