Shellcode obfuscation tool to avoid AV/EDR.
☆129Sep 1, 2023Updated 3 years ago
Alternatives and similar repositories for espio
Users that are interested in espio are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆13Apr 1, 2017Updated 9 years ago
- Terminate AV/EDR leveraging BYOVD attack☆103Mar 21, 2025Updated last year
- Code and notes regarding Malware Development☆11Oct 30, 2022Updated 3 years ago
- Some demos to bypass EDRs or AVs by 78itsT3@m☆359Jul 6, 2022Updated 4 years ago
- CLIPBRDWNDCLASS process injection technique(BOF) - execute beacon shellcode in callback☆65Sep 15, 2022Updated 4 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Shellcode loader with evasion capabilities written in Nim☆16Jan 25, 2025Updated last year
- UAC bypass for x64 Windows 7 - 11（无弹窗版）☆272Sep 5, 2022Updated 4 years ago
- ShellcodeFluctuation PoC ported to Nim☆77Oct 14, 2022Updated 3 years ago
- A Nim implementation of reflective PE-Loading from memory☆294Sep 5, 2024Updated 2 years ago
- 使用多种WinAPI进行权限维持的CobaltStrike脚本，包含API设置系统服务，设置计划任务，管理用户等。☆551Jan 18, 2022Updated 4 years ago
- Awesome AV/EDR/XDR Bypass Tips☆287Apr 23, 2023Updated 3 years ago
- UAC bypass by abusing RPC and debug objects.☆627Oct 19, 2023Updated 2 years ago
- An advanced in-memory evasion technique fluctuating shellcode's memory protection between RW/NoAccess & RX and then encrypting/decrypting…☆1,129Jun 17, 2022Updated 4 years ago
- Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.☆378Mar 8, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.☆21Dec 21, 2022Updated 3 years ago
- Sleep Obfuscation☆839Dec 3, 2023Updated 2 years ago
- Мутация PE x86☆16Jun 2, 2019Updated 7 years ago
- TartarusGate, Bypassing EDRs☆680Jan 25, 2022Updated 4 years ago
- An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer☆556Feb 13, 2024Updated 2 years ago
- Evasive shellcode loader for Red Teaming☆18Aug 15, 2025Updated last year
- SysWhispers on Steroids - AV/EDR evasion via direct system calls.☆1,666Jul 31, 2024Updated 2 years ago
- CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files (BOF) for Cobalt Strike to perform process inject…☆243Jan 4, 2023Updated 3 years ago
- dump lsass进程工具☆556Jul 20, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- 一个普通的BOF用来BypassUAC☆21Apr 6, 2024Updated 2 years ago
- ProxyCraft 是一款轻量级、高性能的命令行代理工具，本身为 HTTP 代理协议，支持 HTTPS/HTTP2/SSE 特性，用于进行本地抓包分析。它专为开发人员、安全测试人员和网络管理员设计，提供便捷的流量观察、分析和调试能力。☆15Jan 22, 2026Updated 8 months ago
- Shellcode Loader with Indirect Dynamic syscall Implementation , shellcode in MAC format, API resolving from PEB, Syscall calll and syscal…☆321Aug 2, 2023Updated 3 years ago
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆87Jul 7, 2022Updated 4 years ago
- works but not work, cao!☆24Sep 4, 2021Updated 5 years ago
- 32 bit process inject shellcode to 32 bit process and 64 bit process☆34May 8, 2023Updated 3 years ago
- In-memory token vault BOF for Cobalt Strike☆151Aug 18, 2022Updated 4 years ago
- C# Based Universal API Unhooker☆408Feb 18, 2022Updated 4 years ago
- CaveCarver - PE backdooring tool which utilizes and automates code cave technique☆231Apr 17, 2023Updated 3 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- 自研的linux_c2☆13Jun 28, 2023Updated 3 years ago
- evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)☆1,512Dec 21, 2023Updated 2 years ago
- PE loader with various shellcode injection techniques☆460Oct 17, 2022Updated 3 years ago
- Cobalt Strike User-Defined Reflective Loader with AV/EDR Evasion in mind☆494Jul 12, 2023Updated 3 years ago
- Generating legitimate call stack frame along with indirect syscalls by abusing Vectored Exception Handling (VEH) to bypass User-Land EDR …☆311Jul 31, 2024Updated 2 years ago
- A BOF to determine Windows Defender exclusions.☆254Jun 25, 2023Updated 3 years ago
- Exploits undocumented elevated COM interface ICMLuaUtil via process spoofing to edit registry then calls ColorDataProxy to trigger UAC b…☆141Feb 2, 2026Updated 8 months ago