akamai / akamai-security-research
This repository includes code and IoCs that are the product of research done in Akamai's various security research teams.
☆500Updated 5 months ago
Alternatives and similar repositories for akamai-security-research
Users that are interested in akamai-security-research are comparing it to the libraries listed below
Sorting:
- PoCs and tools for investigation of Windows process execution techniques☆916Updated 2 months ago
- Kernel mode WinDbg extension and PoCs for token privilege investigation.☆861Updated 3 months ago
- Various ways to execute shellcode☆491Updated last year
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆636Updated 2 years ago
- Aims to identify sleeping beacons☆591Updated 5 months ago
- Spartacus DLL/COM Hijacking Toolkit☆1,039Updated last year
- LPE exploit for CVE-2023-21768☆419Updated 2 years ago
- ☆572Updated 2 weeks ago
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆511Updated 2 years ago
- Simulate the behavior of AV/EDR for malware development training.☆523Updated last year
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆679Updated 2 months ago
- ☆1,646Updated 8 months ago
- a tool to help operate in EDRs' blind spots☆730Updated 5 months ago
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆1,177Updated last year
- Collection of Windows Privilege Escalation (Analyse/PoC/Exploit)☆391Updated 5 months ago
- Weaponizing to get NT SYSTEM for Privileged Directory Creation Bugs with Windows Error Reporting☆357Updated 2 years ago
- ☆525Updated last year
- LPE exploit for CVE-2023-21768☆486Updated last year
- Analyse your malware to surgically obfuscate it☆467Updated 2 months ago
- HWSyscalls is a new method to execute indirect syscalls using HWBP, HalosGate and a synthetic trampoline on kernel32 with HWBP.☆671Updated last year
- Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.☆737Updated 3 years ago
- PoC for a sleep obfuscation technique leveraging waitable timers to evade memory scanners.☆586Updated last year
- ☆750Updated last year
- SHAREM is a shellcode analysis framework, capable of emulating more than 20,000 WinAPIs and virutally all Windows syscalls. It also conta…☆388Updated last week
- A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…☆917Updated 11 months ago
- A repository that maps commonly used attacks using MSRPC protocols to ATT&CK☆325Updated last year
- Automated DLL Sideloading Tool With EDR Evasion Capabilities☆473Updated last year
- This repo contains C/C++ snippets that can be handy in specific offensive scenarios.☆704Updated 3 months ago
- Cobalt Strike UDRL for memory scanner evasion.☆934Updated 11 months ago
- ☆301Updated 6 months ago