BambiZombie / DcRAT-GAI
个人学习使用,二开DcRAT,主要是增加了功能性插件
☆16Updated last year
Alternatives and similar repositories for DcRAT-GAI:
Users that are interested in DcRAT-GAI are comparing it to the libraries listed below
- 免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus☆66Updated 2 years ago
- XOR 加密 分离免杀☆66Updated last year
- 一个2020年练手的基于gin框架搞的在线免杀平台,支持后台管理,邀请码注册等☆38Updated 7 months ago
- vehsyscall:a syscall project that may bypass EDR☆56Updated last year
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆47Updated 11 months ago
- Call the CLR interface from memory to load powershell, process-less powershell☆12Updated last year
- 制作 shellcode 的模板☆20Updated 5 months ago
- dll劫持、dll hijack、Bypass Antivirus、Red Team☆45Updated 5 months ago
- A Blind EDR Project for Educational Purposes☆32Updated 3 months ago
- SysWhispers3WinHttp 基于SysWhispers3项目增添WinHttp分离加载功能并使用32位GCC进行编译,文件大小14KB,可免杀绕过360核晶防护与Defender☆32Updated 2 years ago
- ☆24Updated 2 years ago
- ☆61Updated 8 months ago
- C#基于HTTP实现带GUI的简单远程控制程序☆17Updated 3 months ago
- 一种通过进程注入实现强制关闭部分杀软进程的方法(以360安全卫士和360杀毒为例)☆127Updated last year
- A packer which adds encrypted shell to protect your PE file☆20Updated 5 months ago
- A tool that expands the size of the text section in a PE file without loss, supporting both 32-bit and 64-bit programs.☆30Updated 11 months ago
- 重构Beacon☆15Updated 7 months ago
- Bypass EDR Create TaskServers☆36Updated 2 years ago
- ☆11Updated 2 years ago
- bypassuac、administrator->system提权的免杀小工具,可过Defender、360、卡巴等☆18Updated 2 years ago
- 基于个人习惯使用C/C++的shellcode开发项目模板☆36Updated 8 months ago
- CobaltStrike4.5 Sleeve解密文件,搬砖加一点点修改, 仅作备份使用.☆31Updated 2 years ago
- Bypass Windows Defender☆61Updated 2 years ago
- go实现的shellcode免杀加载器,实测时可过火绒,360。当前效果请自行评判。☆35Updated 7 months ago
- Efficient RAT signature locator for bypassing AV/EDR, supporting static scanning and memory scanning.☆38Updated 6 months ago
- 白文件扫描器 非公开☆28Updated 3 years ago
- Binary Hollowing☆73Updated 7 months ago
- 过360拦截加载无驱动签名☆60Updated 3 years ago
- 用于解密并加载shellcode,支持RC4和AES两种解密方法,并使用DInvoke来动态调用WinAPI函数,从而尝试绕过某些安全解决方案☆28Updated last year
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆66Updated last month