BambiZombie / DcRAT-GAI
个人学习使用,二开DcRAT,主要是增加了功能性插件
☆13Updated last year
Alternatives and similar repositories for DcRAT-GAI:
Users that are interested in DcRAT-GAI are comparing it to the libraries listed below
- A tool that expands the size of the text section in a PE file without loss, supporting both 32-bit and 64-bit programs.☆27Updated 9 months ago
- XOR 加密 分离免杀☆64Updated last year
- 一种通过进程注入实现强制关闭部分杀软进程的方法(以360安全卫士和360杀毒为例)☆125Updated last year
- vehsyscall:a syscall project that may bypass EDR☆54Updated 11 months ago
- 免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus☆67Updated 2 years ago
- C#基于HTTP实现带GUI的简单远程控制程序☆15Updated 3 weeks ago
- SysWhispers3WinHttp 基于SysWhispers3项目增添WinHttp分离加载功能并使用32位GCC进行编译,文件大小14KB,可免杀绕过360核晶防护与Defender☆31Updated last year
- 一个2020年练手的基于gin框架搞的在线免杀平台,支持后台管理,邀请码注册等☆37Updated 5 months ago
- shellcode图片隐写 Loader代码生成☆21Updated 10 months ago
- bypassuac、administrator->system提权的免杀小工具,可过Defender、360、卡巴等☆16Updated 2 years ago
- 白加黑的快速生成器(针对IAT类型)☆92Updated 2 years ago
- ☆23Updated 2 years ago
- ☆55Updated 6 months ago
- 一款集成了DLL-Session0注入,APC注入,映射注入,线程劫持,函数踩踏,提权的工具(支持BIN加解密)☆132Updated 6 months ago
- go实现的shellcode免杀加载器,实测时可过火绒,360。当前效果请自行评判。☆30Updated 5 months ago
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆63Updated 9 months ago
- 基于个人习惯使用C/C++的shellcode开发项目模板☆32Updated 6 months ago
- Binary Hollowing☆69Updated 5 months ago
- 制作 shellcode 的模板☆18Updated 3 months ago
- dll劫持、dll hijack、Bypass Antivirus、Red Team☆28Updated 3 months ago
- 白文件patch☆16Updated 6 months ago
- Call the CLR interface from memory to load powershell, process-less powershell☆12Updated last year
- bypass 360,huorong,tencent,defender with Split loading technique and unhooking☆37Updated last month
- Bypass Windows Defender☆62Updated 2 years ago
- Bypass EDR Create TaskServers☆36Updated 2 years ago
- ☆11Updated 2 years ago
- 基于go的简单劫持方法☆47Updated 3 years ago
- 异或shellcode和ppid欺骗免杀☆14Updated 2 years ago
- 用于解密并加载shellcode,支持RC4和AES两种解密方法,并使用DInvoke来动态调用WinAPI函数,从而尝试绕过某些安全解决方案☆30Updated last year
- CobaltStrike4.5 Sleeve解密文件,搬砖加一点点修改, 仅作备份使用.☆30Updated 2 years ago