☆155May 21, 2026Updated 3 months ago
Alternatives and similar repositories for Awesome-EDR-Evasion
Users that are interested in Awesome-EDR-Evasion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Active Directory forensic framework☆16May 18, 2026Updated 3 months ago
- This repository provides a comprehensive Digital Footprint Checklist to help individuals manage their online presence and enhance privacy…☆18Dec 25, 2024Updated last year
- ☆727Aug 20, 2026Updated last week
- Live runtime audit for installed Android apps. Runs on the rooted phone, serves a browser dashboard.☆32May 23, 2026Updated 3 months ago
- Modules designed to be used with the Conquest framework.☆22Aug 21, 2026Updated last week
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A comprehensive reference repository of C++ code examples for Windows APIs, organized by function name, prefix, and execution context.☆29Feb 23, 2026Updated 6 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆119Dec 21, 2025Updated 8 months ago
- ☆29Sep 9, 2024Updated last year
- PolyEngine is an evasive PE packer designed for CTF challenges and low-level Windows security education. It focuses on bypassing EDR and …☆156Aug 6, 2026Updated 3 weeks ago
- Collection of Notes and CheatSheets used for Red teaming Certs☆504Feb 13, 2023Updated 3 years ago
- Offensive toolage collection for the Windows environment.☆25Dec 4, 2025Updated 8 months ago
- BYOVD tool for manipulating Windows Protected Process Light (PPL) protection at the kernel level.☆95May 25, 2026Updated 3 months ago
- This repository contains detailed adversary simulation APT campaigns targeting various critical sectors. Each simulation includes custom …☆1,123Aug 3, 2026Updated 3 weeks ago
- Amsi Bypass payload that works on Windwos 11☆380Jul 30, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Activation Context Hijacking Evasion Tool☆306Jun 17, 2026Updated 2 months ago
- Modify machine code in binaries with alternative x64 assembly opcodes for AV evasion☆236Jul 7, 2026Updated last month
- Lab Work☆82Jun 29, 2026Updated 2 months ago
- This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at t…☆465Jun 10, 2026Updated 2 months ago
- This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead…☆162Jun 10, 2026Updated 2 months ago
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆107Jan 10, 2026Updated 7 months ago
- Cobalt Strike BOF to freeze EDR/AV processes and dump LSASS using WerFaultSecure.exe PPL bypass☆146Jan 29, 2026Updated 7 months ago
- An advanced JWT extraction & decoding tool for bug bounty hunters! 🏴☠️☆47Mar 24, 2025Updated last year
- Combining KslDump and GhostKatz to dump LSASS using no-fix KslD.sys memory read to bypass PPL. Extracts MSV1_0 NT hashes and WDigest clea…☆45Mar 27, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Red Team Operations Framework☆30Jul 14, 2024Updated 2 years ago
- This is for Ethical Use only. The default automated binaries created are all burned. I have added the script to the repo to modify certai…☆452May 24, 2025Updated last year
- DynLoader A modular Windows loader focused on EDR evasion Built with indirect syscall (Tartarus Gate / Hell’s Gate), Manual PE parsing …☆81Jul 10, 2026Updated last month
- .NET assembly loader with patching AMSI and ETW bypass☆33Apr 16, 2025Updated last year
- A curated list of awesome LOLBins, GTFO projects, and similar 'Living Off the Land' security resources.☆219Jul 11, 2026Updated last month
- Scripts, files, cheatsheets and more used for pentesting and my OSWE / AWAE exam.☆109May 29, 2026Updated 3 months ago
- Safe Harbor is a BOF that streamlines process reconnaissance for red team operations by identifying trusted, low-noise targets to maintai…☆81Oct 27, 2025Updated 10 months ago
- Generate an Alphabetical Polymorphic Shellcode☆145Aug 19, 2025Updated last year
- Rust rewrite of nanodump, a low-level LSASS memory dumping tool.☆16Feb 22, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Evasion kit for Cobalt Strike☆490Jun 5, 2026Updated 2 months ago
- This repository contains scripts about ACL abuse and any other active directory attacking methods.☆36Aug 20, 2023Updated 3 years ago
- Siphon converts virtually any content source into clean, readable Markdown. Built for developers, pentesters, appsec professionals, and a…☆14Mar 14, 2026Updated 5 months ago
- Go (formerly PowerShell) collector for adding MSSQL attack paths to BloodHound with OpenGraph☆345Jul 10, 2026Updated last month
- Dynamic shellcode loader with sophisticated evasion capabilities☆346Oct 1, 2025Updated 10 months ago
- My Notes about Penetration Testing☆741Jun 13, 2026Updated 2 months ago
- sl0ppy-PrivescTaskCreator.ps1☆41Oct 8, 2025Updated 10 months ago