determinasc / SysWhispers3WinHttpLinks
SysWhispers3WinHttp 基于SysWhispers3项目增添WinHttp分离加载功能并使用32位GCC进行编译,文件大小14KB,可免杀绕过360核晶防护与Defender
☆32Updated 2 years ago
Alternatives and similar repositories for SysWhispers3WinHttp
Users that are interested in SysWhispers3WinHttp are comparing it to the libraries listed below
Sorting:
- 免杀计划任务进行权限维持,过主流杀软。 A schtask tool bypass anti-virus☆71Updated 2 years ago
- 一种通过进程注入实现强制关闭部分杀软进程的方法(以360安全卫士和360杀毒为例)☆137Updated last year
- 一个2020年练手的基于gin框架搞的在线免杀平台,支持后台管理,邀请码注册等☆38Updated last year
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆77Updated 2 years ago
- XOR 加密 分离免杀☆67Updated last year
- shellcode loader by c++,免杀,bypass,☆15Updated 3 years ago
- 远程创建任务计划工具☆189Updated 3 years ago
- Cobalt Strike BOF that Add a user to localgroup by samr☆131Updated 2 years ago
- ☆49Updated 2 years ago
- Loader Pre-Technology, Main thread hijacking without using API, get ntdll and kernel32 handle without peb. 加载器前置技术,不使用API进行主线程劫持,不使用PEB…☆82Updated 3 months ago
- 通过C/C++实现的 Windows RID Hijacking persistence technique (RID劫持 影子账户 账户克隆).☆84Updated 3 years ago
- ☆92Updated 4 years ago
- 密码收集☆58Updated 3 years ago
- 过360拦截加载无驱动签名☆60Updated 4 years ago
- 通过WindowsAPI获取用户凭证,并保存到文件中☆194Updated last year
- 过木马免杀制作器☆55Updated 2 years ago
- Get password/cookie/history from browser and use devtools protocol to bypass edr monitoring☆61Updated 6 months ago
- Red team tool designed for quickly identifying hijackable programs, evading antivirus software, and EDR (Endpoint Detection and Response)…☆74Updated 7 months ago
- CVE-2020-0787的简单回显☆32Updated 3 years ago
- more conveniently Visual-Studio-BOF-template☆71Updated 2 years ago
- 将PE文件进行AES加密,然后从远程拉取加载内存中实现免杀☆36Updated 2 years ago
- 白加黑的快速生成器(针对IAT类型)☆107Updated 3 years ago
- Bypass EDR Create TaskServers☆36Updated 2 years ago
- This is a third party agent for Havoc C2 written in golang.☆58Updated last year
- Hidedump:a lsassdump tools that may bypass EDR☆50Updated last year
- 用于解密并加载shellcode,支持RC4和AES两种解密方法,并使用DInvoke来动态调用WinAPI函数,从而尝试绕过某些安全解决方案☆30Updated 2 years ago
- 主要用于隐藏进程真实路径,进程带windows真签名☆114Updated last year
- C# based tool which automates the process of discovering and exploiting DLL Hijacks in target binaries. The Hijacked paths discovered can…☆16Updated 4 years ago
- vehsyscall:a syscall project that may bypass EDR☆59Updated last year
- ☆15Updated last year