TwoSevenOneT / EDRStartupHinderLinks
EDRStartupHinder: A red team tool to prevent Antivirus and EDR from running.
☆99Updated this week
Alternatives and similar repositories for EDRStartupHinder
Users that are interested in EDRStartupHinder are comparing it to the libraries listed below
Sorting:
- Dump processes over WMI with MSFT_MTProcess☆81Updated 3 months ago
- Tool to bypass LSA Protection (aka Protected Process Light)☆64Updated last year
- Attempting to Hook LSASS APIs to Retrieve Plaintext Credentials☆54Updated 8 months ago
- ☆108Updated 10 months ago
- Modern PIC implant for Windows (64 & 32 bit)☆105Updated 5 months ago
- Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion☆100Updated 6 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆89Updated 10 months ago
- A BOF to enumerate system process, their protection levels, and more.☆123Updated last year
- ☆100Updated last year
- A BOF that suspends non-GUI threads for a target process or resumes them resulting in stealthy process silencing.☆57Updated 9 months ago
- BOF to decrypt Signal Desktop chat logs☆72Updated 10 months ago
- a BOF implementation of various registry persistence methods☆92Updated 2 months ago
- Impersonate Tokens using only NTAPI functions☆83Updated 9 months ago
- Golang Automation Framework for Cobalt Strike using the Rest API☆56Updated last month
- Lateral movement with DCOM DLL hijacking☆174Updated 6 months ago
- Using Chromium-based browsers as a proxy for C2 traffic.☆137Updated last month
- Agent for AdaptixC2 with focus in evasion, capability and malleable.☆122Updated 3 weeks ago
- SharpExShell automates the DCOM lateral movment technique which abuses ActivateMicrosoftApp method of Excel application.☆75Updated last year
- ☆52Updated 3 months ago
- ☆54Updated 7 months ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆108Updated 3 weeks ago
- Remote service-staging tool built on Impacket, designed for BOF-style lateral movement workflows that lets you upload custom service load…☆117Updated last month
- This technique leverages PowerShell's .NET interop layer and COM automation to achieve stealthy command execution by abusing implicit typ…☆50Updated 7 months ago
- ☆83Updated last year
- Run Cobalt Strike BOFs in Brute Ratel C4!☆85Updated 8 months ago
- Evasive Payload Delivery Server & C2 Redirector☆112Updated 2 months ago
- Local SYSTEM auth trigger for relaying - X☆155Updated 5 months ago
- Lateral Movement via the .NET Profiler☆84Updated last year
- Webcam capture capability for Cobalt Strike as a BOF, with in-memory download options☆154Updated 9 months ago
- A small collection of Crystal Palace PIC loaders designed for use with Cobalt Strike☆180Updated 2 months ago