cocomelonc / 2022-06-05-malware-av-evasion-7
Malware AV evasion via disable Windows Defender (Registry). C++
☆35Updated 2 years ago
Related projects ⓘ
Alternatives and complementary repositories for 2022-06-05-malware-av-evasion-7
- Red Team Operation's Defense Evasion Technique.☆52Updated 5 months ago
- OFFZONE 2024 Malware Persistence workshop☆15Updated 2 months ago
- GetModuleHandle (via PEB) and GetProcAddress (via EAT) like☆32Updated 2 years ago
- Run payload like a Lazarus Group (UuidFromStringA). C++ implementation☆19Updated 2 years ago
- Bypass Malware Time Delays☆97Updated 2 years ago
- Detect API Hooks☆69Updated 2 years ago
- Grab Firefox post requests by hooking PR_Write function from nss3.dll module using trampoline hook to get passwords and emails of users☆42Updated 2 years ago
- One Click Tool to Scan All the Enabled Protection of current Windows NT Kernel☆43Updated last year
- Antivirus killer using ring-0 kernel driver. Antivirus processes will automatically close while the killer is running.☆6Updated 2 years ago
- NT AUTHORITY\SYSTEM☆38Updated 4 years ago
- A Bumblebee-inspired Crypter☆80Updated last year
- API Hammering with C++20☆34Updated 2 years ago
- Small PoC of using a Microsoft signed executable as a lolbin.☆133Updated last year
- Collection of source code for Polymorphic, Metamorphic, and Permutation Engines used in Malware☆25Updated 5 years ago
- ☆40Updated last year
- Research into removing strings & API call references at compile-time (Anti-Analysis)☆24Updated 5 months ago
- Shellcodev is a tool designed to help and automate the process of shellcode creation.☆100Updated last year
- ☆18Updated 11 months ago
- using the gpu to hide your payload☆47Updated 2 years ago
- Piece of code to detect and remove hooks in IAT☆58Updated 2 years ago
- An initial proof of concept of a bootkit based on Cr4sh's DMABackdoorBoot☆59Updated last year
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆32Updated last year
- a stage1 DLL loader with sleep obfuscation☆32Updated last year
- ☆24Updated 7 months ago
- ZwProcessHollowing is a x64 process hollowing project which uses direct systemcalls, dll unhooking and RC4 payload decryption☆78Updated last year
- A attempt at replicating BLACKLOTUS capabilities, whilst not acting as a direct mimic.☆85Updated last year
- Dll injection through code page id modification in registry. Based on jonas lykk research☆117Updated last year
- havoc kaine plugin to mitigate PAGE_GUARD protected image headers using JOP gadgets☆25Updated 3 months ago
- Recreating and reviewing the Windows persistence methods☆39Updated 3 years ago
- CSharp4Pentesters☆12Updated 2 years ago