gatariee / gocheck
Because AV evasion should be easy.
☆676Updated 3 months ago
Alternatives and similar repositories for gocheck:
Users that are interested in gocheck are comparing it to the libraries listed below
- Analyse your malware to surgically obfuscate it☆456Updated 3 weeks ago
- Indirect Dynamic Syscall, SSN + Syscall address sorting via Modified TartarusGate approach + Remote Process Injection via APC Early Bird …☆655Updated last week
- Real fucking shellcode encryptor & obfuscator tool☆814Updated 3 weeks ago
- Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes☆956Updated last year
- Protected Process Dumper Tool☆532Updated last year
- A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes (such as msfve…☆512Updated 9 months ago
- Simulate the behavior of AV/EDR for malware development training.☆514Updated last year
- shellcode loader for your evasion needs☆317Updated 4 months ago
- Cobalt Strike HTTPS beaconing over Microsoft Graph API☆576Updated 8 months ago
- sandbox approach for malware developers and red teamers to test payloads against detection mechanisms before deployment☆631Updated this week
- A memory-based evasion technique which makes shellcode invisible from process start to end.☆1,172Updated last year
- Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".☆653Updated last year
- DLLirant is a tool to automatize the DLL Hijacking researches on a specified binary.☆488Updated 2 years ago
- Automated DLL Sideloading Tool With EDR Evasion Capabilities☆473Updated last year
- AV/EDR Evasion Lab for Training & Learning Purposes☆1,214Updated last month
- ☆342Updated last year
- A tool which bypasses AMSI (AntiMalware Scan Interface) and PowerShell CLM (Constrained Language Mode) and gives you a FullLanguage Power…☆690Updated 10 months ago
- This comprehensive process injection series is crafted for cybersecurity enthusiasts, researchers, and professionals who aim to stay at t…☆367Updated 3 months ago
- JustEvadeBro, a cheat sheet which will aid you through AMSI/AV evasion & bypasses.☆307Updated 7 months ago
- Dump lsass using only NTAPI functions by hand-crafting Minidump files (without MiniDumpWriteDump!!!)☆579Updated 3 months ago
- A PoC that packages payloads into output containers to evade Mark-of-the-Web flag & demonstrate risks associated with container file form…☆903Updated 9 months ago
- Reduce Entropy And Obfuscate Youre Payload With Serialized Linked Lists☆423Updated last year
- MultiDump is a post-exploitation tool for dumping and extracting LSASS memory discreetly.☆508Updated 7 months ago
- "AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS☆261Updated this week
- Shellcode loader generator with multiples features☆462Updated 2 months ago
- Extract and execute a PE embedded within a PNG file using an LNK file.☆378Updated 4 months ago
- Performing Indirect Clean Syscalls☆521Updated last year
- A set of fully-undetectable process injection techniques abusing Windows Thread Pools☆1,073Updated last year
- Sleep Obfuscation☆733Updated last year
- A POC for the new injection technique, abusing windows fork API to evade EDRs. https://www.blackhat.com/eu-22/briefings/schedule/index.ht…☆633Updated 2 years ago