Bypassing antivirus detection: old-school malware, new tricks
☆69May 10, 2023Updated 3 years ago
Alternatives and similar repositories for bypassing-av-detection
Users that are interested in bypassing-av-detection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A PoC C2 implementation that uses Native Messaging API to execute direct commands in the OS☆19Nov 5, 2025Updated 11 months ago
- Process hollowing injection technique for Red Team operations☆19Sep 18, 2023Updated 3 years ago
- Shellcode loader designed for evasion. Coded in Rust.☆130Mar 5, 2023Updated 3 years ago
- ☆84Aug 18, 2022Updated 4 years ago
- Bl0ck: a tool to interrupt the transmission of QoS Data frames in Wi-Fi 5 and 6 networks☆13Sep 15, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Exploits of different CVE IDs (CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-4…☆16Oct 19, 2022Updated 4 years ago
- This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR…☆14Nov 14, 2023Updated 2 years ago
- Offensive Assembly code snippets.☆15Jul 12, 2023Updated 3 years ago
- This repository implements Threadless Injection in C☆172Dec 23, 2023Updated 2 years ago
- Automated DLL Sideloading Tool With EDR Evasion Capabilities☆510Dec 19, 2023Updated 2 years ago
- Pinjectra is a C/C++ OOP-like library that implements Process Injection techniques (with focus on Windows 10 64-bit)☆16Sep 4, 2020Updated 6 years ago
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆184Feb 2, 2026Updated 8 months ago
- Sleep obfuscation☆275Dec 13, 2024Updated last year
- A red team tool that assists into extracting/dumping master credentials and/or entries from different password managers.☆801Jan 9, 2025Updated last year
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- IAT Unhooking proof-of-concept☆33Apr 7, 2024Updated 2 years ago
- This repo for Windows x32-x64 Kernel/User Mode Exploitation writeups and exploits☆25Oct 20, 2025Updated last year
- AV bypass while you sip your Chai!☆223May 17, 2024Updated 2 years ago
- ☆45Apr 27, 2024Updated 2 years ago
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆12Feb 4, 2024Updated 2 years ago
- SuperSharpShares is a tool designed to automate enumerating domain shares, allowing for quick verification of accessible shares by your a…☆75May 3, 2024Updated 2 years ago
- RunPE adapted for x64 and written in C, does not use RWX☆28May 18, 2024Updated 2 years ago
- BOF implementation of Adopt. Spawns a process from a process. Can sometimes be used to run a session > 0 process from session 0.☆16Jul 22, 2022Updated 4 years ago
- Use Rust to implement some Red Team techniques :)☆12Nov 11, 2024Updated last year
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Info related to the Outflank training: Microsoft Office Offensive Tradecraft☆52May 16, 2024Updated 2 years ago
- PoC for CVE-2023-36802 Microsoft Kernel Streaming Service Proxy☆35Oct 24, 2023Updated 3 years ago
- ProcessHollowing via csharp☆12Dec 21, 2021Updated 4 years ago
- Modified versions of the Cobalt Strike Process Injection Kit☆108Jan 24, 2024Updated 2 years ago
- Projected developed for fun only that simulates APT 29 and Lockbit TTPs, showcasing phishing, ISO execution, and DLL proxying for persist…☆61May 3, 2024Updated 2 years ago
- AMSI Bypass for powershell☆31Apr 26, 2022Updated 4 years ago
- Aggressor script that gets the latest commands from CobaltStrikes web site and creates an aggressor script based on tool options.☆23Oct 6, 2021Updated 5 years ago
- ☆15Nov 23, 2021Updated 4 years ago
- C++ self-Injecting dropper based on various EDR evasion techniques.☆446Feb 11, 2024Updated 2 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Retrieve and display information about active user sessions on remote computers. No admin privileges required.☆211Aug 12, 2024Updated 2 years ago
- shellcode loader for your evasion needs☆353Apr 30, 2025Updated last year
- Proxy function calls through the thread pool with ease☆31Feb 27, 2025Updated last year
- ADSIsearch is a Beacon Object File (BOF) to query Active Directory using ADDS, ADSI, and Network Management WinAPIs.☆10Feb 23, 2025Updated last year
- Offensive Powershell obfuscator☆28Sep 6, 2024Updated 2 years ago
- Sleep obfuscation for shellcode implants and their reflective shit☆54Sep 19, 2023Updated 3 years ago
- The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls☆251Jan 20, 2024Updated 2 years ago