Deep insights into EDR detection approaches
☆61Aug 8, 2026Updated this week
Alternatives and similar repositories for EDR-Introspection
Users that are interested in EDR-Introspection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- some research on EDR deconditioning☆15Jun 4, 2026Updated 2 months ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆62Jun 15, 2026Updated last month
- Detonate redteam tools on VMs and get logs & detection status☆100Jul 31, 2026Updated last week
- Orchestrate detonating redteam artifacts in VMs with different EDRs to see their detection surface.☆70Aug 1, 2026Updated last week
- Shellcode capable of bypassing EAF / IAF mitigations☆30Apr 11, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆74Mar 8, 2026Updated 5 months ago
- Awesome MalDev Links☆79Updated this week
- Malleable Caddy Redirector☆17Apr 24, 2026Updated 3 months ago
- A Windows rootkit that turns user-land processes into Protected Processes☆30Nov 16, 2024Updated last year
- Cobalt Strike BOF☆59Dec 10, 2025Updated 7 months ago
- Collect Windows telemetry for Maldev☆498Aug 1, 2026Updated last week
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆154Mar 8, 2026Updated 5 months ago
- Dynamically resolve API function addresses at runtime in a secure manner.☆74Nov 11, 2025Updated 8 months ago
- demo unhooking functions in ntdll☆28Jul 15, 2025Updated last year
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Pointer encryption library in rust.☆16Apr 13, 2025Updated last year
- dcsync bof☆54Feb 13, 2026Updated 5 months ago
- Simple script to bypass AMSI on Win 10 and Win 11 by exploiting AmsiOpenSession☆16Jan 2, 2026Updated 7 months ago
- Show the time in Roman Numerals☆12Jan 23, 2020Updated 6 years ago
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- Bypassing AVs and Sandboxes☆21Oct 9, 2025Updated 10 months ago
- A basic Terraform configuration for provisioning simple red team infrastructure in DigitalOcean☆12May 5, 2021Updated 5 years ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆67Feb 11, 2025Updated last year
- Linker for Beacon Object Files☆191Jul 28, 2026Updated last week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Ported from [LACUNA Chain](https://github.com/MazX0p/LACUNA-Chain) by Mohamed Alzhrani (0xmaz). lacuna-rs is a reusable Rust crate that …☆18Jul 2, 2026Updated last month
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆43Mar 24, 2026Updated 4 months ago
- Proof-of-Concept exploit for CVE-2026-32223☆21Apr 17, 2026Updated 3 months ago
- Arsenal of modules to beacon postex☆107Mar 13, 2026Updated 4 months ago
- Evasive loader for .NET Framework assemblies☆46May 14, 2026Updated 2 months ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆110Nov 7, 2025Updated 9 months ago
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆100Apr 30, 2026Updated 3 months ago
- One WSL BOF to rule them all☆189Jan 14, 2026Updated 6 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆178Jun 28, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆52Jul 12, 2026Updated 3 weeks ago
- ☆202Jun 11, 2026Updated last month
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆95Jul 27, 2026Updated last week
- ☆59Jul 12, 2026Updated 3 weeks ago
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆277Apr 16, 2026Updated 3 months ago
- Overview of MS Defender☆156Feb 20, 2026Updated 5 months ago
- Print the stack trace☆51Mar 8, 2026Updated 5 months ago