MalwareApiLib / MalwareApiLibrary
collection of apis used in malware development
☆223Updated 2 years ago
Alternatives and similar repositories for MalwareApiLibrary:
Users that are interested in MalwareApiLibrary are comparing it to the libraries listed below
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆374Updated 6 months ago
- Automated DLL Sideloading Tool With EDR Evasion Capabilities☆471Updated last year
- Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists☆412Updated last year
- A Payload Loader Designed With Advanced Evasion Features☆512Updated 2 years ago
- Performing Indirect Clean Syscalls☆514Updated last year
- ☆338Updated last year
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆504Updated 2 years ago
- Native Syscalls Shellcode Injector☆264Updated last year
- A proof-of-concept Cobalt Strike Reflective Loader which aims to recreate, integrate, and enhance Cobalt Strike's evasion features!☆322Updated 7 months ago
- ☆129Updated last year
- Payload Loader With Evasion Features☆314Updated 2 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆292Updated last year
- KaynLdr is a Reflective Loader written in C/ASM☆524Updated last year
- This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and down…☆246Updated last year
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆633Updated 2 years ago
- JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.☆305Updated 6 months ago
- ☆322Updated last year
- Aims to identify sleeping beacons☆564Updated 2 months ago
- My collection of malware dev links☆255Updated 5 months ago
- A proof of concept demonstrating the DLL-load proxying using undocumented Syscalls.☆333Updated last week
- Leaked Windows processes handles identification tool☆282Updated 2 years ago
- Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll☆457Updated 3 years ago
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆256Updated 2 years ago
- The source code files that accompany the short book "Building C2 Implants in C++: A Primer" by Steven Patterson (@shogun_lab).☆225Updated 2 months ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆628Updated 4 months ago
- TartarusGate, Bypassing EDRs☆564Updated 3 years ago
- miscellaneous scripts and programs☆234Updated 3 weeks ago
- ☆740Updated last year
- Beacon Object File Loader☆282Updated last year
- WTSRM☆207Updated 2 years ago