EDR & Antivirus Bypass to Gain Shell Access
☆244Sep 30, 2024Updated 2 years ago
Alternatives and similar repositories for EDR-Antivirus-Bypass-to-Gain-Shell-Access
Users that are interested in EDR-Antivirus-Bypass-to-Gain-Shell-Access are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- LSASS memory dumper using only NTAPIs, creating a minimal minidump. It can be compiled as shellcode (PIC), supports XOR encryption, and r…☆385Apr 26, 2025Updated last year
- Analyse MSI files for vulnerabilities☆145Aug 30, 2024Updated 2 years ago
- Windows Administrator level Implant.☆51Sep 28, 2024Updated 2 years ago
- HookChain: A new perspective for Bypassing EDR Solutions☆613Jan 5, 2025Updated last year
- BEAR-C2 is an adversary simulation and emulation framework built around real-world TTPs inspired by Russian, Chinese, North Korean, and I…☆696Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Interactive Shell and Command Execution over Named-Pipes (SMB) for Fileless lateral movement☆188May 19, 2025Updated last year
- ☆319Jul 6, 2022Updated 4 years ago
- Hacking Windows through iTunes - Local Privilege Escalation 0-day☆97Oct 4, 2024Updated 2 years ago
- NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-bui…☆243Feb 12, 2025Updated last year
- Nameless C2 - A C2 with all its components written in Rust☆283Sep 26, 2024Updated 2 years ago
- Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.☆293May 27, 2024Updated 2 years ago
- An offensive postexploitation tool that will give you complete control over the Outlook desktop application and therefore to the emails c…☆166Oct 9, 2024Updated 2 years ago
- Simulate the behavior of AV/EDR for malware development training.☆565Feb 15, 2024Updated 2 years ago
- Evasive shellcode loader☆401Oct 17, 2024Updated last year
- Open source password manager - Proton Pass • AdSecurely store, share, and autofill your credentials with Proton Pass, the end-to-end encrypted password manager trusted by millions.
- Leverage a legitimate WFP callout driver to prevent EDR agents from sending telemetry☆477Aug 2, 2024Updated 2 years ago
- This repository contains scripts about ACL abuse and any other active directory attacking methods.☆36Aug 20, 2023Updated 3 years ago
- Docker container for running CobaltStrike 4.10☆38Sep 18, 2024Updated 2 years ago
- A no-reboot, in-memory Linux persistence PoC leveraging namespace joining, user-namespace elevation, and self‑deletion.☆71Aug 6, 2025Updated last year
- Deploy reverse shells and perform stealthy process injection with EchoStrike – a Go-based tool for ethical hacking and Red Team operation…☆194Sep 8, 2024Updated 2 years ago
- Online-Crawler-Wayback-Machine☆27Oct 15, 2024Updated last year
- StoneKeeper C2, an experimental EDR evasion framework for research purposes☆205Dec 25, 2024Updated last year
- فایل ها و فیلم های ورکشاپ ردتیم 2024 با هانت لرن☆33Sep 15, 2024Updated 2 years ago
- A Tool that aims to evade av with binary padding☆159Jun 28, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- SubCerts is a simple tool that uses certificate transparency logs (via crt.sh) to extract subdomains of a given domain.☆74Jan 6, 2026Updated 9 months ago
- CVE-2024-38200 & CVE-2024-43609 - Microsoft Office NTLMv2 Disclosure Vulnerability☆147Jan 13, 2025Updated last year
- lsassdump via RtlCreateProcessReflection and NanoDump☆85Oct 18, 2024Updated last year
- PfSense Stored XSS lead to Arbitrary Code Execution exploit☆50Jan 12, 2025Updated last year
- Repo for all my exploits/PoCs☆51May 6, 2025Updated last year
- Kooky cURL-powered replacement for reverse shell via /dev/tcp☆83Sep 22, 2026Updated 2 weeks ago
- An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer☆556Feb 13, 2024Updated 2 years ago
- ☆42Sep 28, 2024Updated 2 years ago
- Advanced Telegram x Discord C2, great for data Exfitration and Network evasion 🔷☆94Feb 22, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆336Sep 21, 2025Updated last year
- Auto exploitation tool for CVE-2024-24401.☆35Sep 7, 2024Updated 2 years ago
- Dump cookies and credentials directly from Chrome/Edge process memory☆1,502Apr 9, 2026Updated 6 months ago
- Just a simple silly PoC demonstrating executable "exe" file that can be used like exe, dll or shellcode...☆168Sep 12, 2024Updated 2 years ago
- Deploy stealthy reverse shells using advanced process hollowing with GhostStrike – a C++ tool for ethical hacking and Red Team operations…☆826Sep 3, 2024Updated 2 years ago
- Tool to remotely dump secrets from the Windows registry☆537Jul 6, 2026Updated 3 months ago
- Hijacking valid driver services to load arbitrary (signed) drivers abusing native symbolic links and NT paths☆366Aug 11, 2024Updated 2 years ago