PoC for downloading data by injecting into processes to evade firewalls
☆35Nov 29, 2025Updated 10 months ago
Alternatives and similar repositories for firewall-bypass
Users that are interested in firewall-bypass are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PhantomsGate: Advanced Shellcode Injection Technique☆28Jul 15, 2024Updated 2 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Oct 31, 2023Updated 2 years ago
- A simple PoC demonstrating process injection techniques on Windows.☆12Mar 5, 2024Updated 2 years ago
- Improved version of EKKO by @5pider that Encrypts only Image Sections☆124Feb 13, 2023Updated 3 years ago
- Utilizing TLS callbacks to execute a payload without spawning any threads in a remote process☆292Jan 21, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Section-based payload obfuscation technique for x64☆63Aug 8, 2024Updated 2 years ago
- ☆108Oct 29, 2024Updated last year
- This project was for my senior capstone at the University of Arizona. I wanted to create a payload that would potentially bypass AV / EDR…☆14Nov 14, 2023Updated 2 years ago
- Windows Thread Pool Injection Havoc Implementation☆35Mar 23, 2024Updated 2 years ago
- LLVM plugin to transparently apply stack spoofing and indirect syscalls to Windows x64 native calls at compile time.☆329Jan 17, 2024Updated 2 years ago
- A PoC demonstrating code execution via DLL Side-Loading in WinSxS binaries.☆112Mar 10, 2024Updated 2 years ago
- CIA UAC bypass implementation that utilizes elevated COM object to write to System32 and an auto-elevated process to execute as administr…☆184Feb 2, 2026Updated 8 months ago
- Local & remote Windows DLL Proxying☆171Jun 17, 2024Updated 2 years ago
- this script adds the ability to encode shellcode (.bin) in XOR,chacha20, AES. You can choose between 2 loaders (Myph / 221b)☆83Dec 20, 2023Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- 看起来叫BabyBypass，实际啥都会记一些☆15Sep 10, 2023Updated 3 years ago
- havoc windows☆15Nov 9, 2023Updated 2 years ago
- Dynamically convert an unmanaged EXE or DLL file to PIC shellcode by prepending a shellcode stub.☆326Apr 12, 2024Updated 2 years ago
- ROP-based sleep obfuscation to evade memory scanners☆388Jun 22, 2025Updated last year
- Things i do because i saw it on twitter on a weekend☆55Jul 20, 2025Updated last year
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆146Dec 16, 2023Updated 2 years ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆40Jul 12, 2024Updated 2 years ago
- Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.☆294May 27, 2024Updated 2 years ago
- Revenant - A 3rd party agent for Havoc that demonstrates evasion techniques in the context of a C2 framework☆387Jul 30, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- yet another sleep encryption thing. also used the default github repo name for this one.☆67May 11, 2023Updated 3 years ago
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated 2 years ago
- Identifies bad bytes from static analysis with any Anti-Virus scanner.☆128Jul 5, 2024Updated 2 years ago
- Execute shellcode files with rundll32☆228Jan 28, 2024Updated 2 years ago
- 「⚙️」Detect which native Windows API's (NtAPI) are being hooked☆40Dec 7, 2024Updated last year
- Building and Executing Position Independent Shellcode from Object Files in Memory☆172Jan 30, 2021Updated 5 years ago
- The code is a pingback to the Dark Vortex blog:☆191Jan 26, 2023Updated 3 years ago
- An interactive shell to spoof some LOLBins command line☆188Jan 27, 2024Updated 2 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- I will be uploading all the codes which I created with the help either opensource projects or blogs. This is a step by step EDR learning …☆292Aug 1, 2025Updated last year
- An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer☆557Feb 13, 2024Updated 2 years ago
- Implementation of Indirect Syscall technique to pop a calc.exe☆110Jan 25, 2024Updated 2 years ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- This repository implements Threadless Injection in C☆172Dec 23, 2023Updated 2 years ago
- A step-by-step walkthrough of how to write a Client and a Driver to communicate with each other and boost the priority of a thread.☆19Dec 12, 2023Updated 2 years ago
- ☆105Oct 7, 2023Updated 3 years ago