☆133Jun 28, 2023Updated 3 years ago
Alternatives and similar repositories for Malware_learns
Users that are interested in Malware_learns are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆56Mar 25, 2024Updated 2 years ago
- Implant drop-in for EDR testing☆144Nov 15, 2023Updated 2 years ago
- It stinks☆99Apr 22, 2022Updated 4 years ago
- A repository filled with ideas to break/detect direct syscall techniques☆25Apr 21, 2022Updated 4 years ago
- ☆21May 28, 2021Updated 5 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A simple program to hook the current process to identify the manual syscall executions on windows☆264Nov 18, 2022Updated 3 years ago
- WTSRM☆213Aug 7, 2022Updated 4 years ago
- Hellsgate + Halosgate/Tartarosgate. Ensures that all systemcalls go through ntdll.dll☆517Feb 3, 2022Updated 4 years ago
- POC for frustrating/defeating Malware Analysts☆153Jun 12, 2022Updated 4 years ago
- ☆117Aug 7, 2022Updated 4 years ago
- Beacon Object File PoC implementation of KillDefender☆235Apr 12, 2022Updated 4 years ago
- RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, …☆498Jan 25, 2022Updated 4 years ago
- A bunch of scripts and code i wrote.☆154Nov 7, 2024Updated last year
- A tool for converting SysWhispers3 syscalls for use with Nim projects☆145Jun 2, 2022Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- A PoC implementation for an evasion technique to terminate the current thread and restore it before resuming execution, while implementin…☆540Aug 1, 2022Updated 4 years ago
- Section Mapping Process Injection (secinject): Cobalt Strike BOF☆105Jan 7, 2022Updated 4 years ago
- This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR …☆257Jul 7, 2022Updated 4 years ago
- A project to replicate the functionality of Noah Powers' ServerSetup script, but with error handling and fixed Namecheap API support.☆33Oct 1, 2021Updated 4 years ago
- You shall pass☆271Jul 16, 2022Updated 4 years ago
- Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.☆47Dec 31, 2021Updated 4 years ago
- This repo goes with the blog entry at blog.malicious.group entitled "Writing your own RDI / sRDI loader using C and ASM".☆90Apr 11, 2023Updated 3 years ago
- Tool for working with Direct System Calls in Cobalt Strike's Beacon Object Files (BOF) via Syswhispers2☆186Jul 21, 2022Updated 4 years ago
- Mochi is a proof-of-concept C++ loader that leverages the ChaiScript embedded scripting language to execute code.☆100Mar 27, 2022Updated 4 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- My implementation of Halo's Gate technique in C#☆53Apr 20, 2022Updated 4 years ago
- Process Ghosting in C#☆217Jan 24, 2022Updated 4 years ago
- ☆169Jan 7, 2022Updated 4 years ago
- Hookers are cooler than patches.☆170Jan 21, 2022Updated 4 years ago
- evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)☆1,510Dec 21, 2023Updated 2 years ago
- Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.☆757Nov 16, 2021Updated 4 years ago
- Patching AmsiOpenSession by forcing an error branching☆152Aug 2, 2023Updated 3 years ago
- Perun's Fart (Slavic God's Luck). Another method for unhooking AV and EDR, this is my C# version.☆112Dec 26, 2021Updated 4 years ago
- Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space☆134Jan 2, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Overwrite a process's recovery callback and execute with WER☆104Apr 17, 2022Updated 4 years ago
- collection of apis used in malware development☆231Aug 2, 2022Updated 4 years ago
- Experiment on reproducing Obfuscate & Sleep☆171Mar 14, 2021Updated 5 years ago
- Lateral Movement Using DCOM and DLL Hijacking☆326Jun 18, 2023Updated 3 years ago
- ☆787Oct 17, 2023Updated 2 years ago
- A Nim implementation of reflective PE-Loading from memory☆295Sep 5, 2024Updated 2 years ago
- Cobalt Strike BOF - Bypass AMSI in a remote process with code injection.☆378Mar 8, 2023Updated 3 years ago