ZanderChang / anti-sandbox
Windows对抗沙箱和虚拟机的方法总结
☆391Updated 4 years ago
Alternatives and similar repositories for anti-sandbox:
Users that are interested in anti-sandbox are comparing it to the libraries listed below
- 绕3环的shellcode免杀框架☆569Updated 4 years ago
- 40行代码检测到大部分CobaltStrike的shellcode☆285Updated 3 years ago
- Some demos to bypass EDRs or AVs by 78itsT3@m☆350Updated 2 years ago
- js免杀shellcode,绕过杀毒添加自启☆356Updated 4 years ago
- 使用纯C/C++编写的ShellCode生成框架☆436Updated 5 years ago
- dump lsass进程工具☆548Updated last year
- 汇总了目前可以找到的所有的进程注入的方式,完成了x86/x64下的测试,不断更新中☆276Updated 3 years ago
- 利用图片隐写术来远程动态加载shellcode☆95Updated 2 years ago
- 利用白名单文件 cdb.exe 执行 shellcode☆213Updated 2 years ago
- 有需求做攻防对抗,买本书学习下常见技术,例子敲一敲☆225Updated 4 years ago
- 将shellcode用rsa加密并动态编译exe,自带几种反沙箱技术。☆521Updated 4 years ago
- python写的一款免杀工具(shellcode加载器)BypassAV,国内杀软全过(windows denfend)2021-9-13☆271Updated 5 months ago
- source code☆181Updated 5 years ago
- EXE转ShellCode工具☆198Updated 2 years ago
- 使用Visral Studio开发ShellCode☆189Updated last year
- 通过反射DLL注入、Win API、C#、以及底层实现NetUserAdd方式实现BypassAV进行增加用户的功能,实现Cobalt Strike插件化☆333Updated 2 years ago
- avList - 杀软进程对应杀软名称☆401Updated 3 years ago
- 远程shellcode加载&权限维持+小功能☆293Updated 10 months ago
- Anhkgg's Tools☆181Updated 4 years ago
- 使用windows api添加用户,可用于net无法使用时.分为nim版,c++版本,RDI版,BOF版。☆416Updated 3 years ago
- 添加计划任务方法集合☆276Updated last year
- 检测绝大部分所谓的内存免杀马☆715Updated 2 years ago
- EDR绕过demo☆290Updated last year
- c++免杀绕过360,vt爆4个☆88Updated 2 years ago
- Cobalt Strike 二开项目☆181Updated 2 years ago
- 这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具,用于节省红队工作量,通过下载浏览器数据库、记录密钥来离线解密浏览器密码。☆614Updated 3 years ago
- 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。☆362Updated 9 months ago
- shellcode 异或加密并生成dll☆249Updated 4 years ago
- 创建隐藏计划任务,权限维持,Bypass AV☆530Updated 3 years ago
- Go shellcode LoaDer☆170Updated 4 years ago