basharbachir / HostingCLR-Bypass-AMSI-Windows-DefenderLinks
☆11Updated 6 years ago
Alternatives and similar repositories for HostingCLR-Bypass-AMSI-Windows-Defender
Users that are interested in HostingCLR-Bypass-AMSI-Windows-Defender are comparing it to the libraries listed below
Sorting:
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆15Updated 6 years ago
- Bypass AMSI and Executing PowerShell scripts from C# - using CyberArk's method to bypass AMSI☆31Updated 5 years ago
- Simple remote administration tool. Written in c++ and MASM.☆18Updated 7 years ago
- Execute an arbitrary command within the context of another process☆20Updated 6 years ago
- WORK IN PROGRESS. RAT written in C++ using Win32 API☆20Updated 5 years ago
- An example of PE hollowing injection technique☆24Updated 6 years ago
- Encrypted Shellcode Loader Generator☆22Updated 6 years ago
- Loader and RunPE file executer☆18Updated 6 years ago
- Maintain Windows Persistence with an evil Netshell Helper DLL☆12Updated 7 years ago
- Self-Loading Registration Free COM Functions☆11Updated 5 years ago
- The project uses popular anti-virus protection bypass techniques☆13Updated 6 years ago
- An AV evasion PoC tool☆9Updated 7 years ago
- Kill AMSI in a remote process PoC☆10Updated 6 years ago
- Persistent through COM Hijacking☆22Updated 6 years ago
- A quick tool for hiding a new process running shellcode.☆57Updated 5 years ago
- ☆14Updated 5 years ago
- Code that can be used to create/steal/manipulate token contexts in a program. Can be implemented into other C# projects.☆12Updated 6 years ago
- Bypass UAC by abusing the Windows Defender Firewall Control Panel, environment variables, and shell protocol handlers☆18Updated 4 years ago
- ☆54Updated 6 years ago
- Remote PE reflective injection with a simple reflective loader☆32Updated 6 years ago
- Reverse shell without Windows cmd.exe, using ReactOS cmd.dll as shellcode☆22Updated 5 years ago
- ACTIVELabs Security Advisories☆23Updated 4 years ago
- Access windows machine remotely on HTTP☆12Updated 4 years ago
- ☆45Updated 7 years ago
- Enumerate the DLLs/Modules using NtQueryVirtualMemory☆32Updated 10 years ago
- InsecurePowerShellHost is a .NET Core host process for InsecurePowerShell, a version of PowerShell Core v6.0.0 with key security features…☆32Updated 7 years ago
- This is a project to receive Base64 data and decode it in process☆15Updated 5 years ago
- ☆21Updated 4 years ago
- exploit termdd.sys(support kb4499175)☆59Updated 6 years ago
- Process Hollowing Packer☆27Updated 7 years ago