Deep insights into EDR detection approaches
☆102Sep 27, 2026Updated last week
Alternatives and similar repositories for EDR-Introspection
Users that are interested in EDR-Introspection are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- some research on EDR deconditioning☆16Jun 4, 2026Updated 4 months ago
- This repository contains the research tool presented at x33fcon 2026, along with the associated presentation slides. The content is made …☆65Jun 15, 2026Updated 3 months ago
- Detonate redteam tools on VMs and get logs & detection status☆108Sep 27, 2026Updated last week
- Orchestrate detonating redteam artifacts in VMs with different EDRs to see their detection surface.☆90Sep 7, 2026Updated last month
- Shellcode capable of bypassing EAF / IAF mitigations☆28Apr 11, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- open source port/reimplementation of the Cobalt Strike BOF Loader as is☆73Updated this week
- List of awesome MalDev, Offensive Security, Hacking links☆102Sep 13, 2026Updated 3 weeks ago
- Cobalt Strike BOF☆57Dec 10, 2025Updated 9 months ago
- A Windows rootkit that turns user-land processes into Protected Processes☆29Nov 16, 2024Updated last year
- Collect Windows telemetry for Maldev☆508Aug 14, 2026Updated last month
- Generate DLL proxy/sideload projects. Automatically parses PE export tables and generates ready-to-compile project for red team engagemen…☆169Sep 13, 2026Updated 3 weeks ago
- Dynamically resolve API function addresses at runtime in a secure manner.☆74Nov 11, 2025Updated 10 months ago
- demo unhooking functions in ntdll☆27Jul 15, 2025Updated last year
- dcsync bof☆52Feb 13, 2026Updated 7 months ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- Simple script to bypass AMSI on Win 10 and Win 11 by exploiting AmsiOpenSession☆17Jan 2, 2026Updated 9 months ago
- A compiled language for Windows position-independent x86-64 shellcode and Beacon Object Files.☆264Jun 28, 2026Updated 3 months ago
- Show the time in Roman Numerals☆12Jan 23, 2020Updated 6 years ago
- A proof of concept AMSI & ETW bypass using trampolines for hooking and modifying execution flow☆19Jun 26, 2025Updated last year
- A basic Terraform configuration for provisioning simple red team infrastructure in DigitalOcean☆12May 5, 2021Updated 5 years ago
- Linker for Beacon Object Files☆192Sep 16, 2026Updated 3 weeks ago
- A truly Position Independent Code (PIC) NimPlant C2 beacon written in C, without reflective loading.☆67Feb 11, 2025Updated last year
- Ported from [LACUNA Chain](https://github.com/MazX0p/LACUNA-Chain) by Mohamed Alzhrani (0xmaz). lacuna-rs is a reusable Rust crate that …☆19Oct 2, 2026Updated last week
- psexec-like remote execution using the paexec wire protocol that supports paexec and remoteexecm2 from manageengine adselfservice plus☆44Mar 24, 2026Updated 6 months ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Proof-of-Concept exploit for CVE-2026-32223☆21Apr 17, 2026Updated 5 months ago
- Arsenal of modules to beacon postex☆105Mar 13, 2026Updated 6 months ago
- Pointer encryption library in rust.☆16Apr 13, 2025Updated last year
- Evasive loader for .NET Framework assemblies☆51May 14, 2026Updated 4 months ago
- Clean Indirect Syscalls with Hook Evasion & Return Address Spoofing.☆102Apr 30, 2026Updated 5 months ago
- Locate dlls and function addresses without PEB Walk and EAT parsing☆109Nov 7, 2025Updated 11 months ago
- One WSL BOF to rule them all☆189Jan 14, 2026Updated 8 months ago
- A Proof of Concept demonstrating CET-compliant callstack spoofing in Rust. It leverages Windows Thread Pool and Enum Callback trampolinin…☆67Jul 12, 2026Updated 2 months ago
- ☆220Sep 11, 2026Updated 3 weeks ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Windows native ETW inspection suite for browsing providers, reading metadata, consuming live events, recording ETL traces, filtering resu…☆113Oct 2, 2026Updated last week
- Cobalt Strike BOF used to perform privilege escalation by exploiting the SeImpersonate privilege. Based on the original GodPotato PoC by …☆281Apr 16, 2026Updated 5 months ago
- Overview of MS Defender☆165Feb 20, 2026Updated 7 months ago
- ☆71Jul 12, 2026Updated 2 months ago
- Print the stack trace☆50Mar 8, 2026Updated 7 months ago
- Kernel Process Termination Tool ( CVE-2026-0828 exploit)☆36Apr 2, 2026Updated 6 months ago
- Aggressor script that gets the latest commands from CobaltStrikes web site and creates an aggressor script based on tool options.☆23Oct 6, 2021Updated 5 years ago