Bypassing AV, EDR, Application Whitelisting and ASR Rules
☆13Apr 18, 2023Updated 3 years ago
Alternatives and similar repositories for DefenseEvasion
Users that are interested in DefenseEvasion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- some AV / EDR / analysis studies☆10May 21, 2023Updated 3 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆15Jan 7, 2023Updated 3 years ago
- This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly☆20Apr 17, 2023Updated 3 years ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆40Jul 12, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- The Totally Legit Authentication Dialog☆12Sep 5, 2023Updated 3 years ago
- kill AV/EDR☆17Jun 9, 2023Updated 3 years ago
- NimWhispers helps with evasion by generating nim implants that can be used to make direct syscalls based on the work of SysWhispersv2☆14Apr 8, 2022Updated 4 years ago
- RunPE implementation with multiple evasive techniques (2)☆15Sep 25, 2025Updated last year
- Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"☆31Jan 14, 2023Updated 3 years ago
- ssh key to BIP39 phrase☆11Apr 10, 2024Updated 2 years ago
- Inject shellcode into process via "EarlyBird"☆27Aug 30, 2021Updated 5 years ago
- An (WIP) EDR Evasion tool for x64 Windows & Linux binaries that utilizes Nanomites, written in Rust.☆35May 8, 2026Updated 5 months ago
- EDR/AV Simulation for Malware Development☆12Oct 21, 2023Updated 3 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged☆87Jul 7, 2022Updated 4 years ago
- Direct syscalls Injection to bypass AV/EDR☆10May 18, 2024Updated 2 years ago
- ☆11Feb 12, 2023Updated 3 years ago
- CPAN Security WG website☆10Oct 29, 2026Updated last week
- A WordPress rest-enumeration script☆10Oct 17, 2026Updated 2 weeks ago
- Canbus library for Golang☆10Apr 11, 2018Updated 8 years ago
- Bypass EDR(Endpoint Detection and Response) environment to write Behinder jsp webshell onto webserver☆13Dec 27, 2023Updated 2 years ago
- Purple Team Dropper generator using open source templates.☆18May 23, 2024Updated 2 years ago
- Event Tracing for Windows EDR bypass in Rust (usermode)☆41Jun 9, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Red Team Operation's Defense Evasion Technique.☆57Jun 4, 2024Updated 2 years ago
- CVE-2022-25765 pdfkit <0.8.6 command injection.☆16Dec 21, 2022Updated 3 years ago
- ErebusGate for Nim Bypass AV/EDR☆159Nov 7, 2022Updated 3 years ago
- BloodyAv is Custom Shell Code loader to Bypass Av and Edr.☆16Mar 21, 2022Updated 4 years ago
- KubePivot-容器渗透测试工具☆13Jul 6, 2026Updated 4 months ago
- Transparently call NTAPI via Halo's Gate with indirect syscalls.☆13Apr 26, 2024Updated 2 years ago
- Bypass EDR Create TaskServers☆38Dec 24, 2022Updated 3 years ago
- Sublime Text 2 plugin for Simplenote☆11Oct 14, 2018Updated 8 years ago
- POCs to test Vlang in cybersecurity aspects.☆37Dec 29, 2022Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Runs given command as screensaver☆12Feb 20, 2017Updated 9 years ago
- This project is created for research into antivirus evasion by unhooking.☆17Sep 2, 2021Updated 5 years ago
- A different approach to writing BOFs in rust.☆21Aug 20, 2025Updated last year
- Loading and executing shellcode in C# without PInvoke.☆22Jan 10, 2022Updated 4 years ago
- Malicious Shortcut(.lnk) Generator☆90Nov 23, 2018Updated 7 years ago
- NTAPI hook bypass with (semi) legit stack trace☆18May 9, 2023Updated 3 years ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Jul 5, 2023Updated 3 years ago