Shellcode obfuscation tool to avoid AV/EDR.
☆131Sep 1, 2023Updated 2 years ago
Alternatives and similar repositories for espio
Users that are interested in espio are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆14Apr 1, 2017Updated 9 years ago
- Terminate AV/EDR leveraging BYOVD attack☆105Mar 21, 2025Updated last year
- Code and notes regarding Malware Development☆11Oct 30, 2022Updated 3 years ago
- Some demos to bypass EDRs or AVs by 78itsT3@m☆360Jul 6, 2022Updated 4 years ago
- CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback☆66Sep 15, 2022Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Shellcode loader with evasion capabilities written in Nim☆16Jan 25, 2025Updated last year
- UAC bypass for x64 Windows 7 - 11（无弹窗版）☆276Sep 5, 2022Updated 3 years ago
- ShellcodeFluctuation PoC ported to Nim☆77Oct 14, 2022Updated 3 years ago
- A Nim implementation of reflective PE-Loading from memory☆296Sep 5, 2024Updated last year
- 使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。☆555Jan 18, 2022Updated 4 years ago
- Awesome AV/EDR/XDR Bypass Tips☆285Apr 23, 2023Updated 3 years ago
- UAC bypass by abusing RPC and debug objects.☆631Oct 19, 2023Updated 2 years ago
- An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting…☆1,121Jun 17, 2022Updated 4 years ago
- Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.☆381Mar 8, 2023Updated 3 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.☆21Dec 21, 2022Updated 3 years ago
- Sleep Obfuscation☆840Dec 3, 2023Updated 2 years ago
- Мутация PE x86☆16Jun 2, 2019Updated 7 years ago
- TartarusGate, Bypassing EDRs☆672Jan 25, 2022Updated 4 years ago
- An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer☆555Feb 13, 2024Updated 2 years ago
- SysWhispers on Steroids - AV/EDR evasion via direct system calls.☆1,649Jul 31, 2024Updated last year
- Evasive shellcode loader for Red Teaming☆18Aug 15, 2025Updated 11 months ago
- CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…☆241Jan 4, 2023Updated 3 years ago
- dump lsass进程工具☆559Jul 20, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 一个普通的BOF用来BypassUAC☆22Apr 6, 2024Updated 2 years ago
- Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscal…☆324Aug 2, 2023Updated 2 years ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆89Jul 7, 2022Updated 4 years ago
- works but not work, cao!☆24Sep 4, 2021Updated 4 years ago
- 32 bit process inject shellcode to 32 bit process and 64 bit process☆35May 8, 2023Updated 3 years ago
- In-memory token vault BOF for Cobalt Strike☆151Aug 18, 2022Updated 3 years ago
- C# Based Universal API Unhooker☆408Feb 18, 2022Updated 4 years ago
- CaveCarver - PE backdooring tool which utilizes and automates code cave technique☆233Apr 17, 2023Updated 3 years ago
- ProxyCraft 是一款轻量级、高性能的命令行代理工具，本身为 HTTP 代理协议，支持 HTTPS/HTTP2/SSE 特性，用于进行本地抓包分析。它专为开发人员、安全测试人员和网络管理员设计，提供便捷的流量观察、分析和调试能力。☆15Jan 22, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- 自研的linux_c2☆13Jun 28, 2023Updated 3 years ago
- evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)☆1,504Dec 21, 2023Updated 2 years ago
- PE loader with various shellcode injection techniques☆454Oct 17, 2022Updated 3 years ago
- Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind☆492Jul 12, 2023Updated 3 years ago
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated last year
- A BOF to determine Windows Defender exclusions.☆257Jun 25, 2023Updated 3 years ago
- Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…☆141Feb 2, 2026Updated 5 months ago