cinzinga / Evasion-Practice
A variety of AV evasion techniques written in C# for practice.
☆89Updated 4 years ago
Alternatives and similar repositories for Evasion-Practice
Users that are interested in Evasion-Practice are comparing it to the libraries listed below
Sorting:
- Payload Generation Framework☆91Updated last year
- Determine if the WebClient Service (WebDAV) is running on a remote system☆137Updated last year
- ☆32Updated 3 years ago
- Shellcode generation and encoding utility☆22Updated 2 years ago
- AV EVASION TECHNIQUES☆79Updated 2 years ago
- C# POC to extract NetNTLMv1/v2 hashes from ETW provider☆256Updated 2 years ago
- ☆159Updated 6 months ago
- Code dump from PEN-300/OSEP updated 2022☆41Updated 2 years ago
- A Python based ingestor for BloodHound☆83Updated 2 years ago
- ☆57Updated 3 months ago
- ☆202Updated last year
- A simple POC that abuses Backup Operator privileges to remote dump SAM, SYSTEM, and SECURITY☆83Updated 3 years ago
- Patching AmsiOpenSession by forcing an error branching☆145Updated last year
- OPSEC safe Kerberoasting in C#☆191Updated 2 years ago
- The Elevate Kit demonstrates how to use third-party privilege escalation attacks with Cobalt Strike's Beacon payload.☆120Updated 4 years ago
- ☆141Updated 3 years ago
- A collection of code snippets built to assist with breaking chains.☆117Updated last year
- Payload for DLL sideloading of the OneDriveUpdater.exe, based on the PaloAltoNetwork Unit42's blog post☆93Updated 2 years ago
- Useful Cobalt Strike Beacon Object Files (BOFs) used during red teaming and penetration testing engagements.☆108Updated 2 years ago
- Patch AMSI and ETW☆239Updated last year
- Bypass AMSI By Dividing files into multiple smaller files☆45Updated 2 years ago
- PoC to coerce authentication from Windows hosts using MS-WSP☆236Updated last year
- Adversary Emulation Framework☆98Updated 9 months ago
- Freeze is a payload toolkit for bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods☆113Updated 2 years ago
- Attempt at Obfuscated version of SharpCollection☆206Updated 3 weeks ago
- This tool leverages the Process Forking technique using the RtlCreateProcessReflection API to clone the lsass.exe process. Once the clone…☆199Updated 6 months ago
- ADCS cert template modification and ACL enumeration☆136Updated last year
- ☆69Updated last month
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆139Updated 8 months ago
- Identifies the bytes that Microsoft Defender flags on.☆84Updated 3 years ago