TwoSevenOneT / EDR-FreezeLinks
EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.
☆245Updated this week
Alternatives and similar repositories for EDR-Freeze
Users that are interested in EDR-Freeze are comparing it to the libraries listed below
Sorting:
- A hoontr must hoont☆94Updated last month
- Two in one, patch lifetime powershell console, no more etw and amsi!☆98Updated 4 months ago
- Lateral Movement as loggedon User via Speech Named Pipe COM & ISpeechNamedPipe + COM Hijacking☆129Updated 2 months ago
- A small How-To on creating your own weaponized WSL file☆115Updated last month
- Adversary Emulation Framework☆122Updated 2 months ago
- A Mythic Agent written in PIC C.☆199Updated 7 months ago
- Bypass user-land hooks by syscall tampering via the Trap Flag☆115Updated 3 weeks ago
- ForsHops☆149Updated 5 months ago
- A python script that automates a C2 Profile build☆44Updated 2 weeks ago
- ☆135Updated 7 months ago
- ☆134Updated 2 weeks ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆47Updated last year
- ☆157Updated 9 months ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆116Updated last year
- A BOF to enumerate system process, their protection levels, and more.☆119Updated 9 months ago
- Version 2 - A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders …☆103Updated 5 months ago
- Evasive Payload Delivery Server & C2 Redirector☆101Updated last month
- Blog/Journal on how to backdoor VSCode extensions☆73Updated 2 months ago
- tool for requesting Entra ID's P2P certificate and authenticating to a remote Entra joinned devices with it☆126Updated last month
- Impersonate Tokens using only NTAPI functions☆80Updated 5 months ago
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆51Updated 4 months ago
- Lateral movement with DCOM DLL hijacking☆140Updated 2 months ago
- ☆146Updated 4 months ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆52Updated last year
- A Mythic agent for Windows written in C☆136Updated 2 weeks ago
- BOF that finds all the Nt* system call stubs within NTDLL and overwrites with clean syscall stubs (user land hook evasion)☆187Updated 7 months ago
- Windows Thread Pool Injection Havoc Implementation☆32Updated last year
- An x64 position-independent shellcode stager that verifies the stage it retrieves prior to execution☆192Updated 9 months ago
- AzureAD beacon object files☆126Updated 9 months ago
- ☆57Updated 7 months ago