Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods
☆145May 12, 2023Updated 3 years ago
Alternatives and similar repositories for Freeze
Users that are interested in Freeze are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by …☆25Apr 4, 2023Updated 3 years ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆383Jul 20, 2023Updated 3 years ago
- A password guessing tool that targets the Kerberos and LDAP services within the Windows Active Directory environment.☆47Feb 27, 2024Updated 2 years ago
- A framework for creating COM-based bypasses utilizing vulnerabilities in Microsoft's WDAPT sensors.☆16Apr 4, 2023Updated 3 years ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆1,471Aug 18, 2023Updated 3 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Mangle is a tool that manipulates aspects of compiled executables (.exe or DLL) to avoid detection from EDRs☆109Dec 15, 2022Updated 3 years ago
- ☆11Dec 8, 2023Updated 2 years ago
- Freeze.rs is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls written in RUST☆201Sep 17, 2024Updated 2 years ago
- a tool to help operate in EDRs' blind spots☆777Dec 2, 2024Updated last year
- Proof-of-concept obfuscation toolkit for C# post-exploitation tools☆644Jul 22, 2022Updated 4 years ago
- various methods of making API calls☆19Feb 1, 2025Updated last year
- Havoc plugin allowing in-memory execution of PowerShell cmdlets☆14Dec 14, 2023Updated 2 years ago
- shellcode loader for your evasion needs☆353Apr 30, 2025Updated last year
- Payload execution research tool leveraging the Windows Atom Table — for authorized red teaming and security research only.☆13Sep 25, 2025Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…☆1,427Oct 27, 2023Updated 3 years ago
- Analyse your malware to surgically obfuscate it☆550Jun 27, 2026Updated 4 months ago
- BOF for Kerberos abuse (an implementation of some important features of the Rubeus).☆623Nov 23, 2025Updated 11 months ago
- A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…☆1,236Jun 10, 2024Updated 2 years ago
- Generate BloodHound compatible JSON from logs written by ldapsearch BOF, pyldapsearch and Brute Ratel's LDAP Sentinel☆427Oct 24, 2026Updated last week
- A python script to automatically coerce a Windows server to authenticate on an arbitrary machine through 12 methods.☆2,345Apr 24, 2026Updated 6 months ago
- SourcePoint is a C2 profile generator for Cobalt Strike command and control servers designed to ensure evasion.☆1,227Sep 29, 2026Updated last month
- Automated DLL Sideloading Tool With EDR Evasion Capabilities☆510Dec 19, 2023Updated 2 years ago
- ☆14Mar 19, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆84Aug 13, 2024Updated 2 years ago
- A Mythic agent for Windows written in C☆189Aug 22, 2026Updated 2 months ago
- Hide shellcode by shuffling bytes into a random array and reconstruct at runtime☆207Mar 26, 2025Updated last year
- A set of fully-undetectable process injection techniques abusing Windows Thread Pools☆1,287Dec 11, 2023Updated 2 years ago
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆389Jul 30, 2024Updated 2 years ago
- Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)☆750Aug 17, 2026Updated 2 months ago
- Scripts for public use that we've randomly written, or have updated from other people's work.☆40Jun 25, 2024Updated 2 years ago
- Syscall Shellcode Loader (Work in Progress)☆1,292May 8, 2024Updated 2 years ago
- A tool to assist DLL hijacking via the Havoc GUI☆14Jan 9, 2024Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A list of python tools to help create an OPSEC-safe Cobalt Strike profile.☆549Jun 12, 2026Updated 4 months ago
- A BOF that runs unmanaged PEs inline☆704Oct 23, 2024Updated 2 years ago
- Go shellcode loader that combines multiple evasion techniques☆392Jun 21, 2023Updated 3 years ago
- Spartacus DLL/COM Hijacking Toolkit☆352May 4, 2024Updated 2 years ago
- Malware As A Service☆154Feb 26, 2024Updated 2 years ago
- Refactored & improved CredKing password spraying tool, uses FireProx APIs to rotate IP addresses, stay anonymous, and beat throttling☆1,301Mar 19, 2025Updated last year
- Patch AMSI and ETW☆251May 8, 2024Updated 2 years ago