Alternatives and similar repositories for EDR-XDR-AV-Killer

Users that are interested in EDR-XDR-AV-Killer are comparing it to the libraries listed below

• 0xHossam / HuffLoader
  Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.
  ☆279Updated 9 months ago
• MaorSabag / TrueSightKiller
  CPP AV/EDR Killer
  ☆468Updated 2 years ago
• senzee1984 / InflativeLoading
  Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.
  ☆324Updated last year
• CICADA8-Research / IHxExec
  Process injection alternative
  ☆404Updated last year
• mertdas / SharpIncrease
  A Tool that aims to evade av with binary padding
  ☆160Updated last year
• mertdas / SharpTerminator
  Terminate AV/EDR Processes using kernel driver
  ☆351Updated 2 years ago
• Adaptix-Framework / Extension-Kit
  AdaptixFramework Extension Kit
  ☆355Updated last week
• 0xEr3bus / PoolPartyBof
  A beacon object file implementation of PoolParty Process Injection Technique.
  ☆430Updated 2 years ago
• ProcessusT / Venoma
  Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution
  ☆198Updated 7 months ago
• antonioCoco / SspiUacBypass
  Bypassing UAC with SSPI Datagram Contexts
  ☆460Updated 2 years ago
• wh0amitz / BypassCredGuard
  Credential Guard Bypass Via Patching Wdigest Memory
  ☆335Updated 2 years ago
• CBLabresearch / Clematis
  PE to shellcode
  ☆260Updated last year
• senzee1984 / EDRPrison
  Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry
  ☆454Updated last year
• Cobalt-Strike / sleepmask-vs
  A simple Sleepmask BOF example
  ☆164Updated last month
• praetorian-inc / goffloader
  A Go implementation of Cobalt Strike style BOF/COFF loaders.
  ☆258Updated 10 months ago
• bobby-tablez / VBScrambler
  A Python-based VBScript Code Obfuscator
  ☆45Updated last month
• Cobalt-Strike / bof-vs
  A Beacon Object File (BOF) template for Visual Studio
  ☆258Updated last month
• kleiton0x00 / RemoteShellcodeExec
  Execute shellcode from a remote-hosted bin file using Winhttp.
  ☆240Updated 2 years ago
• florylsk / ExecIT
  Execute shellcode files with rundll32
  ☆214Updated last year
• Cipher7 / ChaiLdr
  AV bypass while you sip your Chai!
  ☆227Updated last year
• oldboy21 / RflDllOb
  Reflective DLL Injection Made Bella
  ☆248Updated last year
• je5442804 / WPTaskScheduler_CVE-2024-49039
  WPTaskScheduler RPC Persistence & CVE-2024-49039 via Task Scheduler
  ☆135Updated 5 months ago
• Offensive-Panda / RWX_MEMEORY_HUNT_AND_INJECTION_DV
  Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.
  ☆288Updated last year
• brosck / Awesome-AV-EDR-XDR-Bypass
  Awesome AV/EDR/XDR Bypass Tips
  ☆285Updated 2 years ago
• 0xEr3bus / RdpStrike
  Positional Independent Code to extract clear text password from mstsc.exe using API Hooking via HWBP.
  ☆249Updated last year
• rad9800 / BootExecuteEDR
  ☆409Updated last year
• ElJaviLuki / CobaltStrike_OpenBeacon
  Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for secu…
  ☆257Updated last year
• Konis-Bros / espio
  Shellcode obfuscation tool to avoid AV/EDR.
  ☆130Updated 2 years ago
• M01N-Team / HeaderLessPE
  ☆244Updated 2 years ago
• g3tsyst3m / elevationstation
  elevate to SYSTEM any way we can! Metasploit and PSEXEC getsystem alternative
  ☆378Updated 2 years ago