huoji120 / DuckMemoryScanLinks
检测绝大部分所谓的内存免杀马
☆734Updated 3 years ago
Alternatives and similar repositories for DuckMemoryScan
Users that are interested in DuckMemoryScan are comparing it to the libraries listed below
Sorting:
- 恶意代码逃逸源代码 http://payloads.online☆754Updated 3 years ago
- 戎码之眼是一个window上的基于att&ck模型的威胁监控工具.有效检测常见的未知威胁与已知威胁.防守方的利剑☆526Updated 2 years ago
- 蓝队应急工具☆525Updated last year
- 从零开始学免杀☆436Updated 3 years ago
- 这是一个一键辅助抓取360安全浏览器密码的CobaltStrike脚本以及解密小工具，用于节省红队工作量，通过下载浏览器数据库、记录密钥来离线解密浏览器密码。☆638Updated 4 years ago
- CSLoader is a general purpose obfuscation and anti-virus tool based on a reimplementation of the llvm project obfuscator(https://github.c…☆837Updated 7 months ago
- 内网域渗透小工具☆731Updated 4 years ago
- avList - 杀软进程对应杀软名称☆406Updated 4 years ago
- ☆466Updated 2 years ago
- 免杀技术大杂烩---乱拳也打不死老师傅☆1,090Updated 4 years ago
- 绕3环的shellcode免杀框架☆574Updated 4 years ago
- cs4.4修改去特征狗狗版(美化ui,去除特征,自带bypass核晶截图等..)☆575Updated 2 years ago
- 免杀shellcode加载器☆459Updated 4 years ago
- 一款针对向日葵的识别码和验证码提取工具☆918Updated 4 years ago
- 红队行动中利用白利用、免杀、自动判断网络环境生成钓鱼可执行文件。☆366Updated last year
- 适用于Cobalt Strike的插件☆564Updated 4 years ago
- Syscall免杀☆511Updated last year
- 研究利用golang各种姿势bypassAV☆813Updated 3 years ago
- Cooolis-ms是一个包含了Metasploit Payload Loader、Cobalt Strike External C2 Loader、Reflective DLL injection的代码执行工具，它的定位在于能够在静态查杀上规避一些我们将要执行且含有特征的…☆923Updated 4 months ago
- 域控安全one for all☆733Updated last year
- 分享几个直接可用的内存马，记录一下学习过程中看过的文章☆973Updated 3 years ago
- dump lsass进程工具☆558Updated 2 years ago
- 使用windows api添加用户，可用于net无法使用时.分为nim版，c++版本，RDI版，BOF版。☆421Updated 4 years ago
- 关于安全狗和云锁的自动化绕过脚本☆523Updated 4 years ago
- 助力每一位RT队员，快速生成免杀木马☆811Updated last year
- 红方人员作战执行手册☆486Updated 5 years ago
- 创建隐藏计划任务，权限维持，Bypass AV☆551Updated 4 years ago
- Some demos to bypass EDRs or AVs by 78itsT3@m☆358Updated 3 years ago
- Golang-Gin 框架写的免杀平台，内置分离、捆绑等多种BypassAV方式。☆687Updated 2 years ago
- 破解的cs4.0、cs4.0官方手册翻译和一些笔记☆406Updated 5 years ago