qi4L / Blackout-goLinks
kill AV/EDR
☆22Updated 2 years ago
Alternatives and similar repositories for Blackout-go
Users that are interested in Blackout-go are comparing it to the libraries listed below
Sorting:
- Self Cleanup in post-ex job☆58Updated last year
- Delete file regardless of whether the handle is used via SetFileInformationByHandle☆55Updated 2 years ago
- 一个demo☆23Updated last year
- more conveniently Visual-Studio-BOF-template☆71Updated 2 years ago
- vehsyscall:a syscall project that may bypass EDR☆60Updated last year
- A BOF/COFF loader implemented in Go and CGO.☆22Updated last year
- ☆43Updated 2 years ago
- AddDefenderExclusions Beacon Object File☆40Updated 2 years ago
- Bypass EDR Create TaskServers☆37Updated 2 years ago
- ☆28Updated 2 years ago
- Rust 重构的 sRDI☆16Updated last year
- Shellcode Reductio Entropy Tools☆73Updated 2 years ago
- Binary Hollowing☆84Updated last year
- 在cobaltstrike中使用的bof工具集,收集整理验证好用的bof。☆15Updated 4 years ago
- ☆31Updated 2 years ago
- ☆19Updated 3 years ago
- Get password/cookie/history from browser and use devtools protocol to bypass edr monitoring☆61Updated 7 months ago
- BOF implementation of delete self poc that delete a locked executable or a currently running file from disk by its pid, path, or the curr…☆78Updated 2 years ago
- Execute Remote Assembly with args passing and with AMSI and ETW patching .☆34Updated 4 months ago
- A little tool to play with Windows security☆12Updated 3 months ago
- Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from mem…☆65Updated last month
- Silently Install Chrome Extension For Persistence☆94Updated last year
- Cobalt Strike Beacon Object File (BOF) that obtain SYSTEM privilege with SeImpersonate privilege by passing a malicious IUnknwon object t…☆57Updated 2 years ago
- ☆15Updated 2 years ago
- Golang implementation of Reflective load PE from memory☆62Updated 3 years ago
- Alternative Shellcode Execution Via Callbacks Rewrite In C#☆89Updated 2 years ago
- Enable RDP and set firewall by Windows API.☆21Updated 3 years ago
- Kill Everything AV/EDR☆27Updated last year
- command execute without 445 port☆52Updated 3 years ago
- ☆25Updated 6 months ago