A guide to learning antivirus evasion
☆88Jun 22, 2026Updated 4 months ago
Alternatives and similar repositories for DefenderBypass
Users that are interested in DefenderBypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Microsoft Account Enumeration Tool☆15Oct 2, 2025Updated last year
- ☆22Apr 11, 2025Updated last year
- a C# implementation for a shellcode loader that capable to bypass Cortex XDR and Sophos EDR.☆92May 24, 2025Updated last year
- Ring -4 to Ring 0: offense-defense firmware research platform. We build the bootkits, then we catch them. Closed-loop. Zero trust in sili…☆14Oct 14, 2026Updated 2 weeks ago
- A Very Cool Process Injector That supports both Shellcode injection and dll injection☆27Sep 22, 2025Updated last year
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Token impersonation in PowerShell to execute under the context of another user.☆24Oct 14, 2025Updated last year
- GhostHound is a BloodHound OpenGraph extension that surfaces Active Directory tombstone reanimation as a first-class attack path, enumera…☆47Aug 9, 2026Updated 2 months ago
- MCP Server for use bloodyAD with Claude or Gemini-CLI☆15Sep 27, 2025Updated last year
- Detection-aware BloodHound attack-path scoring - the quietest route to your objective, calibrated across five detection tiers (audit/EDR/…☆67Aug 22, 2026Updated 2 months ago
- A C# tool for requesting certificates from ADCS using DCOM over SMB. This tool allows you to remotely request X.509 certificates from CA …☆170Nov 2, 2025Updated last year
- PowerShell toolkit for AMSI/Defender detection-boundary analysis and static malware triage maps byte offsets to detection triggers, plus …☆85Updated this week
- Library that provides Python examples for interacting with the Cobalt Strike REST API☆25Nov 26, 2025Updated 11 months ago
- Multi-Provider LLM Jailbreak Research Framework☆13Jul 16, 2025Updated last year
- This tool generates an undetectable Windows reverse shell PowerShell script. Users can configure IP and Port according to their requireme…☆20Jul 16, 2024Updated 2 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Advanced EDR Evasion via AI Telemetry Spoofing & WASM Sandboxing. Project Onyx is a PoC Red Team pipeline designed to demonstrate advance…☆119Sep 17, 2026Updated last month
- C++ tool and library for converting .bin files to shellcode in multiple output formats.☆34Aug 4, 2026Updated 3 months ago
- ☆62Jul 8, 2025Updated last year
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆28Oct 27, 2026Updated last week
- Generate an Alphabetical Polymorphic Shellcode☆151Aug 19, 2025Updated last year
- A curated collection of Living off the Land (LotL) attack demonstrations where trusted binaries go rogue, because if it didn’t launch cal…☆37Jan 7, 2026Updated 9 months ago
- Scripts that automate portions of pentests.☆60Oct 26, 2026Updated last week
- Proof of Concept for the NTLM Hash Leak via .library-ms CVE-2025-24054 / CVE-2025-24071☆22Nov 5, 2025Updated 11 months ago
- Dump lsass using only NTAPI functions creating 3 JSON and 1 ZIP file... and generate the MiniDump file later!☆611Aug 17, 2026Updated 2 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Malicious PixelCode is a security research project that demonstrates a covert technique for encoding executable files into pixel data and…☆176Feb 2, 2026Updated 9 months ago
- Huffman Coding in Shellcode Obfuscation & Dynamic Indirect Syscalls Loader.☆308Apr 6, 2025Updated last year
- This is for Ethical Use only. The default automated binaries created are all burned. I have added the script to the repo to modify certai…☆453Sep 26, 2026Updated last month
- Collection of OSEP Notes and Payloads☆19Jul 21, 2025Updated last year
- Cross-platform syscall-powered implant & C2 — direct syscalls (Win), raw syscalls (Linux), HTTPS/DNS/ICMP channels. No winapi layer.☆67Oct 25, 2026Updated last week
- Modern PIC implant for Windows (64 & 32 bit)☆103Jul 23, 2025Updated last year
- List of tools to use in the Advance Red Team Operations course from White Knight Labs☆15Dec 22, 2024Updated last year
- OSEP - Offsec Expert Professional☆22Jun 23, 2024Updated 2 years ago
- all published scripts devloped by ahmed khlief☆20Apr 3, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A command line process execution monitor for Windows.☆17Sep 2, 2026Updated 2 months ago
- P2P Communications of Named Pipes☆12Jul 30, 2026Updated 3 months ago
- ☆11Dec 8, 2023Updated 2 years ago
- Arduino based script that detects mosquitoes and kills them with a 1W laser.☆17Dec 20, 2024Updated last year
- A collection of techniques for process injection on Windows☆105Aug 16, 2026Updated 2 months ago
- A centralized repository housing comprehensive research and implementations in Low-Level Windows Internals. This lab covers the full spec…☆25Sep 3, 2026Updated 2 months ago
- Backdooring VSCode Projects☆131Jun 5, 2025Updated last year