Ryze-T / EdrKiller
☆91Updated 3 years ago
Alternatives and similar repositories for EdrKiller:
Users that are interested in EdrKiller are comparing it to the libraries listed below
- more conveniently Visual-Studio-BOF-template☆62Updated last year
- Shellcode Reductio Entropy Tools☆65Updated last year
- Cobalt Strike BOF that Add a user to localgroup by samr☆127Updated 2 years ago
- Beacon compiled using clang☆63Updated 2 years ago
- vehsyscall:a syscall project that may bypass EDR☆54Updated last year
- ☆48Updated 3 years ago
- 通过WindowsAPI获取用户凭证,并保存到文件中☆194Updated 9 months ago
- 免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus☆67Updated 2 years ago
- Amaterasu terminates, or inhibits, protected processes such as application control and AV/EDR solutions by leveraging the Sysinternals Pr…☆71Updated last year
- ReturnGate, just like HellsGate.☆66Updated 2 years ago
- Binary Hollowing☆71Updated 6 months ago
- ☆56Updated 7 months ago
- Take a screenshot without injection for Cobalt Strike☆184Updated last year
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆42Updated 10 months ago
- CobaltStrike4.5 Sleeve解密文件,搬砖加一点点修改, 仅作备份使用.☆31Updated 2 years ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆71Updated last year
- Alternative Shellcode Execution Via Callbacks Rewrite In C#☆88Updated last year
- ☆40Updated last year
- CVE-2020-1472 C++☆81Updated 2 years ago
- 关于RPC一些绕EDR的tips☆164Updated 2 years ago
- 替代PrintBug用于本地提权的新方式,主要利用MS-EFSR协议中的接口函数 借鉴了Potitpotam中对于EFSR协议的利用,实现了本地提权的一系列方式 Drawing on the use of the EFSR protocol in Potitpotam, …☆148Updated 3 years ago
- beta☆116Updated 6 months ago
- Cobalt Strike 二开项目☆182Updated 2 years ago
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆64Updated 3 weeks ago
- ☆100Updated 2 years ago
- Efficient RAT signature locator for bypassing AV/EDR, supporting static scanning and memory scanning.☆33Updated 5 months ago
- Silently Install Chrome Extension For Persistence☆49Updated 8 months ago
- ☆154Updated 9 months ago
- Cobalt Strike BOF that Add an admin user☆72Updated 2 years ago
- power-kill is a project that kill protected processes (such as EDR or AV) by injecting shellcode into high privilege processes☆46Updated 3 years ago