Alternatives and similar repositories for FileRenameJunctionsEDRDisable:

Users that are interested in FileRenameJunctionsEDRDisable are comparing it to the libraries listed below

• NUL0x4C / FetchPayloadFromDummyFile
  Construct the payload at runtime using an array of offsets
  ☆59Updated 5 months ago
• Faran-17 / Hellshazzard
  Indirect Syscall implementation to bypass userland NTAPIs hooking.
  ☆56Updated 4 months ago
• Idov31 / NidhoggScript
  NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg
  ☆44Updated 9 months ago
• EvilBytecode / Lifetime-Amsi-EtwPatch
  Two in one, patch lifetime powershell console, no more etw and amsi!
  ☆80Updated 5 months ago
• cpu0x00 / EternelSuspention
  a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless
  ☆39Updated 5 months ago
• safedv / RustSoliloquy
  A Rust implementation of Internal-Monologue — retrieving NetNTLM hashes without touching LSASS, leveraging SSPI for NTLM negotiation and …
  ☆101Updated this week
• xpn / CloudInject
  ☆105Updated 3 weeks ago
• Karkas66 / CelestialSpark
  A modern 64-bit position independent meterpreter and Sliver compatible reverse_TCP Staging Shellcode based on Cracked5piders Stardust
  ☆83Updated 8 months ago
• oldkingcone / BYOSI
  Evade EDR's the simple way, by not touching any of the API's they hook.
  ☆56Updated 4 months ago
• ioncodes / SilentLoad
  "Service-less" driver loading
  ☆143Updated 2 weeks ago
• pygrum / gimmick
  Section-based payload obfuscation technique for x64
  ☆59Updated 4 months ago
• tehstoni / LexiCrypt
  Shellcode encryptor using a substitution cipher with a randomly generated key.
  ☆87Updated this week
• BC-SECURITY / IronSharpPack
  IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…
  ☆105Updated 7 months ago
• oldboy21 / JayFinder
  Find DLLs with RWX section
  ☆75Updated last year
• Offensive-Panda / DV_NEW
  This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)
  ☆46Updated 7 months ago
• naksyn / ProcessStomping
  A variation of ProcessOverwriting to execute shellcode on an executable's section
  ☆147Updated last year
• nickvourd / Rocabella
  Sniffing files generator
  ☆44Updated last month
• Bl4ckM1rror / PEAs
  ☆58Updated last year
• synacktiv / OUned
  The OUned project automating Active Directory Organizational Units ACL exploitation through gPLink poisoning
  ☆79Updated 8 months ago
• decoder-it / RelabelAbuse
  ☆60Updated 6 months ago
• ZERODETECTION / MSC_Dropper
  ☆128Updated 4 months ago
• MaorSabag / SideLoadingDLL
  Do some DLL SideLoading magic
  ☆76Updated last year
• MzHmO / DebugAmsi
  DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.
  ☆92Updated last year
• joe-desimone / rep-research
  ☆68Updated 4 months ago
• HulkOperator / AuthStager
  ☆39Updated last month
• dsnezhkov / shutter
  ☆109Updated 3 years ago
• realoriginal / shellcode-template
  A cmkr based win32 shellcode template for a unified build platform and more production friendly structure/testing.
  ☆59Updated 3 weeks ago
• huntandhackett / PassiveAggression
  Source code and examples for PassiveAggression
  ☆54Updated 6 months ago
• sevagas / Advanced_Initial_access_in_2024_OffensiveX
  Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"
  ☆127Updated 4 months ago