This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR products using techniques that negate or circumvent detection techniques used by these products.
☆14Nov 14, 2023Updated 2 years ago
Alternatives and similar repositories for Capstone-Project
Users that are interested in Capstone-Project are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- How to dump lsass via spoolsv with DLL side-loading.☆14Nov 29, 2025Updated 10 months ago
- 免杀绕过某60，过核晶，vt爆6个☆13May 1, 2023Updated 3 years ago
- ☆43Feb 18, 2025Updated last year
- Bl0ck: a tool to interrupt the transmission of QoS Data frames in Wi-Fi 5 and 6 networks☆13Sep 15, 2025Updated last year
- A lsass dump tool using MiniDumpWriteDump & syscall(NtOpenProcess) technique. only tested on windows 11 with defender enabled:-)☆17Oct 11, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆84Aug 13, 2024Updated 2 years ago
- Packer is a compact, fast and crosss-platform serialization library for store data in a buffer☆23Aug 5, 2023Updated 3 years ago
- ApexLdr is a DLL Payload Loader written in C☆116Jul 17, 2024Updated 2 years ago
- Cortex EDR Ransomware protection Bypass☆27Feb 8, 2025Updated last year
- 新的注入方式☆11Sep 30, 2018Updated 8 years ago
- ☆12Aug 24, 2022Updated 4 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆15Jan 7, 2023Updated 3 years ago
- A .NET 4.8 application to retrieve delivr.to emails from Microsoft Outlook via COM☆20Jul 19, 2025Updated last year
- ☆13Jul 24, 2022Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A Windows native DLL injection library written in C# that supports several methods of injection.☆11Dec 17, 2018Updated 7 years ago
- WhatHitMe is a Python3 tool which provides the possible Groups and their attributed Campaigns that may have attacked you in an incident, …☆18Jun 29, 2023Updated 3 years ago
- ☆222Mar 10, 2024Updated 2 years ago
- impersonate trustedinstaller by fiddling with tokens☆13Aug 30, 2021Updated 5 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Oct 31, 2023Updated 2 years ago
- Using SetWindowHookEx for preinjected DLL's☆58Aug 25, 2022Updated 4 years ago
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆14Dec 30, 2023Updated 2 years ago
- ☆84Aug 18, 2022Updated 4 years ago
- A Cobalt Strike payload generator and lateral movement aggressor script which places Beacon shellcode into a custom shellcode loader☆44Sep 25, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- Evasive loader to bypass static detection☆57Jan 15, 2024Updated 2 years ago
- Pathbyter is a lightning fast proof-of-concept ransomware that uses RSA wrapped AES, multiprocessing, in memory key encryption, appends e…☆26Sep 25, 2023Updated 3 years ago
- Inject remote shellcode or DLL file into process memory using FileMapping☆37Aug 6, 2023Updated 3 years ago
- a stage1 DLL loader with sleep obfuscation☆36Dec 27, 2022Updated 3 years ago
- ☆19Oct 2, 2022Updated 4 years ago
- Sleep Obfuscation☆45Oct 13, 2022Updated 4 years ago
- improving zerosums smbdoor - a silent remote backdoor which abuses undoc. APIs in srvnet.sys☆49Mar 10, 2023Updated 3 years ago
- Simple API Hooks detector☆77Aug 22, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Execute a payload at each right click on a file/folder in the explorer menu for persistence☆173Mar 15, 2023Updated 3 years ago
- Shellcode loader written in C and Assembly utilizing direct or indirect syscalls to evade UM EDR hooks☆143Dec 22, 2024Updated last year
- A Simple PoC☆22May 24, 2024Updated 2 years ago
- Code snippets to add on top of cobalt strike sleep mask to achieve patchless hook on AMSI and ETW☆86Mar 19, 2023Updated 3 years ago
- Less sugar (entropy) for your binaries☆34Sep 10, 2025Updated last year
- Minifilter Callback Patching Proof-of-Concept☆77Oct 31, 2022Updated 3 years ago
- Adjusted version of the impacket-dcomexec script to work against Windows 10☆19Oct 13, 2025Updated last year