Deep insights into EDR detection approaches
☆99Aug 23, 2026Updated 3 weeks ago
Alternatives and similar repositories for EDR-Introspection
Users that are interested in EDR-Introspection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- some research on EDR deconditioning☆16Jun 4, 2026Updated 3 months ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆65Jun 15, 2026Updated 3 months ago
- Detonate redteam tools on VMs and get logs & detection status☆106Aug 14, 2026Updated last month
- Orchestrate detonating redteam artifacts in VMs with different EDRs to see their detection surface.☆89Sep 7, 2026Updated last week
- Shellcode capable of bypassing EAF / IAF mitigations☆29Apr 11, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆73Mar 8, 2026Updated 6 months ago
- List of awesome MalDev, Offensive Security, Hacking links☆99Updated this week
- Cobalt Strike BOF☆58Dec 10, 2025Updated 9 months ago
- Collect Windows telemetry for Maldev☆508Aug 14, 2026Updated last month
- A Windows rootkit that turns user-land processes into Protected Processes☆29Nov 16, 2024Updated last year
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆163Updated this week
- Dynamically resolve API function addresses at runtime in a secure manner.☆74Nov 11, 2025Updated 10 months ago
- demo unhooking functions in ntdll☆27Jul 15, 2025Updated last year
- dcsync bof☆52Feb 13, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Simple script to bypass AMSI on Win 10 and Win 11 by exploiting AmsiOpenSession☆16Jan 2, 2026Updated 8 months ago
- Show the time in Roman Numerals☆12Jan 23, 2020Updated 6 years ago
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- A basic Terraform configuration for provisioning simple red team infrastructure in DigitalOcean☆12May 5, 2021Updated 5 years ago
- Linker for Beacon Object Files☆191Updated this week
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆67Feb 11, 2025Updated last year
- Ported from [LACUNA Chain](https://github.com/MazX0p/LACUNA-Chain) by Mohamed Alzhrani (0xmaz). lacuna-rs is a reusable Rust crate that …☆19Jul 2, 2026Updated 2 months ago
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 5 months ago
- Proof-of-Concept exploit for CVE-2026-32223☆21Apr 17, 2026Updated 5 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Arsenal of modules to beacon postex☆105Mar 13, 2026Updated 6 months ago
- Pointer encryption library in rust.☆16Apr 13, 2025Updated last year
- Evasive loader for .NET Framework assemblies☆51May 14, 2026Updated 4 months ago
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆101Apr 30, 2026Updated 4 months ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆109Nov 7, 2025Updated 10 months ago
- One WSL BOF to rule them all☆189Jan 14, 2026Updated 8 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆190Jun 28, 2026Updated 2 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆62Jul 12, 2026Updated 2 months ago
- ☆216Sep 11, 2026Updated last week
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆112Jul 27, 2026Updated last month
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆280Apr 16, 2026Updated 5 months ago
- Overview of MS Defender☆161Feb 20, 2026Updated 6 months ago
- Print the stack trace☆51Mar 8, 2026Updated 6 months ago
- ☆68Jul 12, 2026Updated 2 months ago
- Kernel Process Termination Tool ( CVE-2026-0828 exploit)☆36Apr 2, 2026Updated 5 months ago
- Aggressor script that gets the latest commands from CobaltStrikes web site and creates an aggressor script based on tool options.☆23Oct 6, 2021Updated 4 years ago