Shellcode obfuscation tool to avoid AV/EDR.
☆130Sep 1, 2023Updated 3 years ago
Alternatives and similar repositories for espio
Users that are interested in espio are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Apr 1, 2017Updated 9 years ago
- Terminate AV/EDR leveraging BYOVD attack☆105Mar 21, 2025Updated last year
- Some demos to bypass EDRs or AVs by 78itsT3@m☆359Jul 6, 2022Updated 4 years ago
- ☆19Aug 25, 2022Updated 4 years ago
- Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.☆21Dec 21, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Abusing autoElevate - Fully Undetectable UAC Bypass exploit☆11Jul 15, 2022Updated 4 years ago
- ☆15Aug 17, 2023Updated 3 years ago
- Shellcode loader with evasion capabilities written in Nim☆16Jan 25, 2025Updated last year
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆135Jan 2, 2023Updated 3 years ago
- PE loader with various shellcode injection techniques☆464Oct 17, 2022Updated 4 years ago
- Code and notes regarding Malware Development☆11Oct 30, 2022Updated 4 years ago
- CaveCarver - PE backdooring tool which utilizes and automates code cave technique☆230Apr 17, 2023Updated 3 years ago
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated 2 years ago
- Use hardware breakpoint to dynamically change SSN in run-time☆280Apr 10, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- TartarusGate, Bypassing EDRs☆682Jan 25, 2022Updated 4 years ago
- Мутация PE x86☆16Jun 2, 2019Updated 7 years ago
- Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…☆141Feb 2, 2026Updated 8 months ago
- A Nim implementation of reflective PE-Loading from memory☆294Sep 5, 2024Updated 2 years ago
- Sleep Obfuscation☆839Dec 3, 2023Updated 2 years ago
- UAC bypass for x64 Windows 7 - 11（无弹窗版）☆273Sep 5, 2022Updated 4 years ago
- Loading Remote AES Encrypted PE in memory , Decrypted it and run it☆1,043Aug 29, 2023Updated 3 years ago
- An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting…☆1,135Jun 17, 2022Updated 4 years ago
- An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer☆558Feb 13, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques and used by Patchwork group.☆844Jul 2, 2024Updated 2 years ago
- dump lsass进程工具☆555Jul 20, 2023Updated 3 years ago
- Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind☆496Jul 12, 2023Updated 3 years ago
- Awesome AV/EDR/XDR Bypass Tips☆286Apr 23, 2023Updated 3 years ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆87Jul 7, 2022Updated 4 years ago
- ☆14May 10, 2021Updated 5 years ago
- Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime☆307Aug 2, 2023Updated 3 years ago
- ShellcodeFluctuation PoC ported to Nim☆77Oct 14, 2022Updated 4 years ago
- A modified RunPE (process hollowing) technique avoiding the usage of SetThreadContext by appending a TLS section which calls the original…☆94Sep 26, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C# Based Universal API Unhooker☆408Feb 18, 2022Updated 4 years ago
- works but not work, cao!☆24Sep 4, 2021Updated 5 years ago
- .NET assembly loader with patchless AMSI and ETW bypass☆393Apr 19, 2023Updated 3 years ago
- Learning notes of amazing Sliver C2 project.☆25Apr 14, 2023Updated 3 years ago
- UAC bypass by abusing RPC and debug objects.☆627Oct 19, 2023Updated 3 years ago
- Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscal…☆322Aug 2, 2023Updated 3 years ago
- Module Stomping, No New Thread, HellsGate syscaller, UUID Shellcode Runner for x64 Windows 10!☆450Mar 8, 2023Updated 3 years ago