Bypass Windows defender syscall
☆17Jul 17, 2021Updated 5 years ago
Alternatives and similar repositories for KanonSys
Users that are interested in KanonSys are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Runpe + DInvoke + Syscall☆17Jun 18, 2021Updated 5 years ago
- Trabajo Fin de Grado sobre CubeX, un cronómetro de cubos de rubik☆24Dec 10, 2025Updated 10 months ago
- Nice try reading NTDLL from disk, nerd.☆19Apr 18, 2022Updated 4 years ago
- Process injection via KernelCallbackTable☆13Jan 28, 2022Updated 4 years ago
- Anti-Debug methods with C#☆13Dec 20, 2020Updated 5 years ago
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Windows NTLMSSP library☆11Oct 13, 2020Updated 6 years ago
- A .NET binary loader that bypasses AMSI☆48Sep 20, 2021Updated 5 years ago
- Append custom data to signed pe file and DONOT DESTROY SIGNED STATUS.☆26Mar 13, 2021Updated 5 years ago
- Direct syscalls Injection to bypass AV/EDR☆10May 18, 2024Updated 2 years ago
- A wrapper around Windows, calls explicitly the lowest possible calls☆14Jan 19, 2023Updated 3 years ago
- A small shellcode loader library written in C#☆46Dec 21, 2021Updated 4 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- Malware persistence via COM DLL hijacking. C++ implementation example☆15May 2, 2022Updated 4 years ago
- Bypassing kernel patch protection at runtime☆22Aug 16, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Get your data from the resource section manually, with no need for windows apis☆66Oct 22, 2024Updated last year
- MappingInjection via csharp☆39Nov 19, 2021Updated 4 years ago
- JALSI - Just Another Lame Shellcode Injector☆30Aug 1, 2021Updated 5 years ago
- Inject dll to explorer.exe and hide file from process.☆22Apr 24, 2021Updated 5 years ago
- muddyc3_golang☆21Feb 13, 2020Updated 6 years ago
- Public scripts etc.☆19Jan 14, 2024Updated 2 years ago
- ☆21Jan 28, 2020Updated 6 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆13Sep 30, 2022Updated 4 years ago
- It stinks☆99Apr 22, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- C# version of MDSec's ParallelSyscalls☆143Jan 9, 2022Updated 4 years ago
- Playing with PE's and Building Structures by Hand☆22Apr 21, 2022Updated 4 years ago
- 关闭恶意驱动的文件和注册表保护☆14Jun 28, 2022Updated 4 years ago
- Hooking Heavens Gate in a weekend☆12Jan 1, 2022Updated 4 years ago
- Manual Map DLL injection implemented with Cobalt Strike's Beacon Object Files.☆151Sep 3, 2020Updated 6 years ago
- Bypass UAC by abusing shell protocol handlers☆15Jul 12, 2021Updated 5 years ago
- A C implementation of the Sektor7 "A Thief" Windows privesc technique.☆68Mar 25, 2022Updated 4 years ago
- Patch AMSI and ETW in remote process via direct syscall☆87Apr 28, 2022Updated 4 years ago
- A shellcode tool to make convenient shellcode programing work flow.☆12Oct 19, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Example for PagedOut!☆26Oct 22, 2019Updated 6 years ago
- Mimikatz embedded as classes☆27Oct 25, 2021Updated 4 years ago
- PoC: Exploit 32-bit Thread Snapshot of WOW64 to Take Over $RIP & Inject & Bypass Antivirus HIPS (HITB 2021)☆163May 27, 2021Updated 5 years ago
- Bypass UAC by abusing the Internet Explorer Add-on installer☆57Jul 12, 2021Updated 5 years ago
- Escalate from a low-integrity Administrator account to NT AUTHORITY\SYSTEM without an LPE exploit by combining a COM UAC bypass and Token…☆160Dec 19, 2021Updated 4 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- Dangling COM Keys Finder☆17Nov 16, 2021Updated 4 years ago