EgeBalci / deoptimizer
Evasion by machine code de-optimization.
☆376Updated 9 months ago
Alternatives and similar repositories for deoptimizer:
Users that are interested in deoptimizer are comparing it to the libraries listed below
- Threadless Process Injection through entry point hijacking☆344Updated 7 months ago
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆282Updated last year
- Call stack spoofing for Rust☆334Updated 2 months ago
- ROP-based sleep obfuscation to evade memory scanners☆346Updated 2 months ago
- Process Injection using Thread Name☆257Updated last week
- Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths☆328Updated 8 months ago
- Shoggoth: Asmjit Based Polymorphic Encryptor☆724Updated last year
- Dynamically invoke arbitrary unmanaged code☆340Updated 5 months ago
- Rusty Injection - Shellcode Reflective DLL Injection (sRDI) in Rust (Codename: Venom)☆335Updated last year
- C++ self-Injecting dropper based on various EDR evasion techniques.☆370Updated last year
- Performing Indirect Clean Syscalls☆535Updated 2 years ago
- Experimental Windows x64 Kernel Rootkit with anti-rootkit evasion features.☆532Updated last month
- HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.☆664Updated last year
- TartarusGate, Bypassing EDRs☆580Updated 3 years ago
- PoCs for Kernelmode rootkit techniques research.☆365Updated 3 months ago
- Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.☆283Updated 10 months ago
- A small x64 library to load dll's into memory.☆437Updated last year
- Collect Windows telemetry for Maldev☆340Updated 2 months ago
- A new technique that can be used to bypass memory scanners. This can be useful in hiding problematic code (such as reflective loaders imp…☆303Updated 6 months ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆335Updated 2 months ago
- Template-based shellcode packer written in Rust, with indirect syscall support. Made with <3 for pentesters.☆273Updated 2 weeks ago
- Because AV evasion should be easy.☆688Updated 4 months ago
- Sleep Obfuscation☆742Updated last year
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆671Updated last month
- Windows rootkit designed to work with BYOVD exploits☆183Updated 3 months ago
- ☆256Updated 2 years ago
- Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls☆368Updated 6 months ago
- Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.☆397Updated last year
- DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.☆491Updated 2 years ago
- PoC Implementation of a fully dynamic call stack spoofer☆761Updated 9 months ago