Alternatives and similar repositories for AV-EDR-Lab-Environment-Setup:

Users that are interested in AV-EDR-Lab-Environment-Setup are comparing it to the libraries listed below

• Helixo32 / CrimsonEDR
  Simulate the behavior of AV/EDR for malware development training.
  ☆460Updated 11 months ago
• reveng007 / Learning-EDR-and-EDR_Evasion
  I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning …
  ☆266Updated last year
• Offensive-Panda / ProcessInjectionTechniques
  This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at t…
  ☆348Updated last month
• Helixo32 / NimBlackout
  Kill AV/EDR leveraging BYOVD attack
  ☆335Updated last year
• Meowmycks / LetMeowIn
  A sophisticated, covert Windows-based credential dumper using C++ and MASM x64.
  ☆383Updated 6 months ago
• Maldev-Academy / MaldevAcademyLdr.1
  ☆331Updated last year
• logangoins / Krueger
  Proof of Concept (PoC) .NET tool for remotely killing EDR with WDAC
  ☆322Updated 3 weeks ago
• ajm4n / DLLHound
  Find potential DLL Sideloads on your windows computer
  ☆172Updated 2 weeks ago
• WesleyWong420 / RedTeamOps-Havoc-101
  Materials for the workshop "Red Team Ops: Havoc 101"
  ☆366Updated 3 months ago
• RedefiningReality / Cobalt-Strike
  Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection
  ☆268Updated 8 months ago
• rasta-mouse / OST-C2-Spec
  Open Source C&C Specification
  ☆224Updated this week
• cpu0x00 / Ghost
  Evasive shellcode loader
  ☆318Updated 3 months ago
• REDMED-X / OperatorsKit
  Collection of Beacon Object Files (BOF) for Cobalt Strike
  ☆557Updated 6 months ago
• rad9800 / BootExecuteEDR
  ☆337Updated last month
• vxCrypt0r / Voidgate
  A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfve…
  ☆507Updated 7 months ago
• CICADA8-Research / RemoteKrbRelay
  Remote Kerberos Relay made easy! Advanced Kerberos Relay Framework
  ☆543Updated 6 months ago
• dobin / avred
  Analyse your malware to surgically obfuscate it
  ☆439Updated last week
• OtterHacker / Conferences
  ☆294Updated 2 months ago
• Tylous / Freeze.rs
  Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST
  ☆174Updated 4 months ago
• ricardojoserf / TrickDump
  Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!
  ☆410Updated last month
• RedSiege / GraphStrike
  Cobalt Strike HTTPS beaconing over Microsoft Graph API
  ☆564Updated 7 months ago
• rtecCyberSec / Packer_Development
  Slides & Code snippets for a workshop held @ x33fcon 2024
  ☆250Updated 7 months ago
• RalfHacker / Kerbeus-BOF
  BOF for Kerberos abuse (an implementation of some important features of the Rubeus).
  ☆417Updated 2 months ago
• deepinstinct / ContainYourself
  A PoC of the ContainYourself research presented in DEFCON 31, which abuses the Windows containers framework to bypass EDRs.
  ☆306Updated last year
• Maldev-Academy / EntropyReducer
  Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists
  ☆408Updated last year
• WesleyWong420 / OPSEC-Tradecraft
  Collection of OPSEC Tradecraft and TTPs for Red Team Operations
  ☆280Updated this week
• senzee1984 / Amsi_Bypass_In_2023
  Amsi Bypass payload that works on Windwos 11
  ☆374Updated last year
• Maldev-Academy / ExecutePeFromPngViaLNK
  Extract and execute a PE embedded within a PNG file using an LNK file.
  ☆340Updated 2 months ago
• senzee1984 / MutationGate
  Use hardware breakpoint to dynamically change SSN in run-time
  ☆243Updated 9 months ago
• reveng007 / DarkWidow
  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …
  ☆617Updated 3 months ago