Scripts permettant de contourner la protection antivirale de Windows Defender via la technique de Direct Syscalls avec une injection de shellcode préalablement obfusqué avec un fonction XOR.
☆31Oct 14, 2022Updated 3 years ago
Alternatives and similar repositories for Bypass-AV-DirectSyscalls
Users that are interested in Bypass-AV-DirectSyscalls are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A havoc UI python module to help in reporting and vulnerabilities to exploit on an internal network.☆13Oct 31, 2023Updated 2 years ago
- 2 PE Loader tools that load a PE from memory, decrypt it and make some magic things to execute seamlessly from memory☆54May 20, 2026Updated 2 months ago
- Wiki for stuff☆41Aug 6, 2021Updated 4 years ago
- Quickly generate every payload type for each listener and optionally host via HTTP.☆22Aug 23, 2021Updated 4 years ago
- Shellcode loader that loads shellcode from UUID's☆23Mar 17, 2026Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Probably the easiest way to setup new beacon notifications in Cobalt Strike☆10Jan 7, 2022Updated 4 years ago
- BOF for C2 framework☆45Nov 9, 2024Updated last year
- ☆20Mar 21, 2024Updated 2 years ago
- Periodically check hashcat cracking progress and notify of success.☆10Dec 18, 2018Updated 7 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆25Sep 29, 2023Updated 2 years ago
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- DomainPasswordSpray is a tool written in PowerShell to perform a password spray attack against users of a domain. By default it will auto…☆15Apr 2, 2026Updated 3 months ago
- a port of privkit bof for havoc☆24Dec 8, 2023Updated 2 years ago
- Making Shellcode fully undetectable using uuid☆23May 7, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆14Dec 5, 2024Updated last year
- Un dropper de payload indétectable qui désactive l'antivirus Windows Defender puis paramètre un fichier batch à l'ouverture de session de…☆13Mar 6, 2021Updated 5 years ago
- ☆21Nov 6, 2024Updated last year
- Small tool to scan On-Premises Exchange servers, useful for analytical purposes and patch management☆20Aug 28, 2022Updated 3 years ago
- A powerful Windows UI monitoring and DNS exfiltration tool written in Rust, combining advanced UI event capture capabilities with secure …☆20Mar 6, 2025Updated last year
- A Post-exploitation Toolset for Interacting with the Microsoft Graph API☆16Nov 16, 2023Updated 2 years ago
- golang uuid-shellcode加载器,分离执行,可直接把shellcode写入程序。☆15Aug 12, 2021Updated 4 years ago
- this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..☆13Aug 15, 2024Updated last year
- string encryption in Nim☆19Jun 15, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Bypass AMSI via PowerShell by splitting a file into multiple chunks☆53Jul 22, 2021Updated 4 years ago
- Library of BOFs to interact with SQL servers☆16Dec 6, 2024Updated last year
- A tiny fast reverse proxy.☆12Dec 7, 2023Updated 2 years ago
- uuid-shellcode-execution☆12May 9, 2021Updated 5 years ago
- Golang C2 and Beacon/Agent built from the ground up for scalability and expandability☆13Mar 16, 2021Updated 5 years ago
- Useful Cobalt Strike BOFs found or used during engagements☆145Oct 6, 2023Updated 2 years ago
- PE Crypter written in Nim☆102Mar 25, 2021Updated 5 years ago
- Run python from a single exe☆36May 1, 2022Updated 4 years ago
- Test antiviruses☆11Dec 3, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- C# project to Reflectively load .Net assemblies in memory☆19Jun 19, 2024Updated 2 years ago
- Port forwarding via MSRPC (445/tcp) [WIP]☆34Aug 26, 2021Updated 4 years ago
- Bypass Windows Defender with py2exe from memory.☆41Feb 10, 2022Updated 4 years ago
- 「🐞」Bug Bounty Tricks☆42Oct 4, 2023Updated 2 years ago
- KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…☆14Jul 29, 2022Updated 3 years ago
- .NET wrapper around LogonUserA to test creds☆12Jun 2, 2022Updated 4 years ago