Alternatives and similar repositories for BestEdrOfTheMarket:

Users that are interested in BestEdrOfTheMarket are comparing it to the libraries listed below

• netero1010 / EDRSilencer
  A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the …
  ☆1,651Updated 6 months ago
• tkmru / awesome-edr-bypass
  Awesome EDR Bypass Resources For Ethical Hacking
  ☆1,172Updated 3 months ago
• lem0nSec / ShellGhost
  A memory-based evasion technique which makes shellcode invisible from process start to end.
  ☆1,175Updated last year
• BlackSnufkin / LitterBox
  sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment
  ☆729Updated 2 weeks ago
• wavestone-cdt / EDRSandblast
  ☆1,639Updated 8 months ago
• ZeroMemoryEx / Terminator
  Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
  ☆966Updated last year
• VirtualAlllocEx / DEFCON-31-Syscalls-Workshop
  Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
  ☆658Updated last year
• naksyn / Pyramid
  a tool to help operate in EDRs' blind spots
  ☆730Updated 5 months ago
• mgeeky / ProtectMyTooling
  Multi-Packer wrapper letting us daisy-chain various packers, obfuscators and other Red Team oriented weaponry. Featured with artifacts wa…
  ☆950Updated 5 months ago
• lsecqt / OffensiveCpp
  This repo contains C/C++ snippets that can be handy in specific offensive scenarios.
  ☆703Updated 3 months ago
• nickvourd / Windows-Local-Privilege-Escalation-Cookbook
  Windows Local Privilege Escalation Cookbook
  ☆1,103Updated 3 months ago
• nickvourd / Supernova
  Real fucking shellcode encryptor & obfuscator tool
  ☆853Updated 2 weeks ago
• gatariee / gocheck
  Because AV evasion should be easy.
  ☆716Updated 5 months ago
• SafeBreach-Labs / PoolParty
  A set of fully-undetectable process injection techniques abusing Windows Thread Pools
  ☆1,095Updated last year
• Helixo32 / CrimsonEDR
  Simulate the behavior of AV/EDR for malware development training.
  ☆521Updated last year
• 0xHossam / Killer
  Killer is a super simple tool designed to bypass AV/EDR security tools using various evasive techniques.
  ☆805Updated 10 months ago
• Sh3lldon / FullBypass
  A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…
  ☆746Updated last month
• outflanknl / C2-Tool-Collection
  A collection of tools which integrate with Cobalt Strike (and possibly other C2 frameworks) through BOF and reflective DLL loading techni…
  ☆1,218Updated last year
• RedTeamOperations / Advanced-Process-Injection-Workshop
  ☆750Updated last year
• daem0nc0re / TangledWinExec
  PoCs and tools for investigation of Windows process execution techniques
  ☆915Updated last month
• helviojunior / hookchain
  HookChain: A new perspective for Bypassing EDR Solutions
  ☆517Updated 4 months ago
• magicsword-io / LOLDrivers
  Living Off The Land Drivers
  ☆1,160Updated last month
• reveng007 / DarkWidow
  Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …
  ☆675Updated last month
• ZeroMemoryEx / Blackout
  kill anti-malware protected processes ( BYOVD) ( Microsoft Won)
  ☆936Updated last year
• The-Viper-One / PsMapExec
  Dominate Active Directory with PowerShell. Inspired by CrackMapExec / NetExec.
  ☆954Updated last month
• vu-ls / Crassus
  ☆571Updated last week
• wietze / HijackLibs
  Project for tracking publicly disclosed DLL Hijacking opportunities.
  ☆744Updated last week
• Accenture / Spartacus
  Spartacus DLL/COM Hijacking Toolkit
  ☆1,037Updated last year
• assume-breach / Home-Grown-Red-Team
  ☆707Updated last year
• Idov31 / Sandman
  Sandman is a NTP based backdoor for red team engagements in hardened networks.
  ☆787Updated last year