A summary about different projects/presentations/tools to test how to evade malware sandbox systems
☆56Dec 5, 2018Updated 7 years ago
Alternatives and similar repositories for awesome-sandbox-evasion
Users that are interested in awesome-sandbox-evasion are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Two C# RunPE's capable of x86 and x64 injections☆10Dec 2, 2018Updated 7 years ago
- Create a C++ PE which loads an XTEA-crypted .NET PE shellcode in memory.☆16Sep 29, 2018Updated 8 years ago
- ☆29Feb 14, 2018Updated 8 years ago
- Robust API monitoring system presented in the paper "Designing Robust API Monitoring Solutions" (IEEE TDSC)☆25Dec 8, 2021Updated 4 years ago
- A script that parses PowerView's output for GPO analysis. Integrated into bloodhound to find misconfigurations of URA, SMB signing etc☆14Feb 9, 2020Updated 6 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- DarkRat source - beware untested source and resources.☆19Dec 7, 2019Updated 6 years ago
- Build a Jekyll blog in minutes, without touching the command line.☆16Dec 6, 2018Updated 7 years ago
- An example of PE hollowing injection technique☆26Jun 28, 2019Updated 7 years ago
- Main repository to pull all Cisco related projects.☆17Sep 21, 2017Updated 9 years ago
- WhiteRabbitTracker: Analyzing malware evasions with information flow tracking☆20Jul 25, 2021Updated 5 years ago
- Assembly block for finding and calling the windows API functions inside import address table(IAT) of the running PE file.☆85May 3, 2023Updated 3 years ago
- Windows Local Privilege Escalation - 0 Day Vulnerability (schtasks.exe) released by @SandboxEscaper :)☆19May 22, 2019Updated 7 years ago
- Metamorphic Code Generator & Loader☆15Dec 7, 2020Updated 5 years ago
- The mission of Black Lotus Labs is to leverage our network visibility to both help protect customers and keep the internet clean.☆13Jun 18, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Personal compilation of APT malware from whitepaper releases, documents and own research☆261Feb 7, 2019Updated 7 years ago
- Spin up a reverse proxy quickly on Heroku☆15Dec 5, 2020Updated 5 years ago
- C# Implementation of Get-VaultCredential☆14Jul 31, 2018Updated 8 years ago
- Generate a Yara rule to find base64-encoded files containg a specific keyword☆40Jul 13, 2018Updated 8 years ago
- A simple ransomware defender.It uses minifilter to filt "rewrite" and "delete" events in kernel.And it handles event in user mode.☆27Aug 14, 2018Updated 8 years ago
- ☆16Jul 3, 2020Updated 6 years ago
- This is a rich-featured Visual Basic macro code for use during Penetration Testing assignments, implementing various advanced post-exploi…☆144Oct 24, 2021Updated 5 years ago
- A basic Terraform configuration for provisioning simple red team infrastructure in DigitalOcean☆12May 5, 2021Updated 5 years ago
- Just another collection of links, tools, reports and other stuff☆25Jun 22, 2021Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Script made for bypassing antivirus using Powershell Injection method. Place your shellcode from msfvenom on line 15, the script can be c…☆15Jun 14, 2023Updated 3 years ago
- Packer (actually a crypter) for antivirus evasion implemented for windows PE files (BSc-Thesis)☆110Jun 17, 2020Updated 6 years ago
- A Control Panel Applet dropper project. It has a high success rate on engagements since nobody cares about .CPL files and you can just do…☆52May 31, 2018Updated 8 years ago
- Python code for mass scanning IP ranges for certificates☆13Oct 30, 2020Updated 6 years ago
- Win32 PE Anti-RE and Anti-debugging Framework☆13May 14, 2019Updated 7 years ago
- About C# loader that copies a chunk at the time of the shellcode in memory in a suspended process, rather that all at once☆12Jul 14, 2022Updated 4 years ago
- Allows you to add breakpoints from IDA (from the graph/text view) to WinDbg easily☆14Oct 10, 2018Updated 8 years ago
- Listen to your binaries☆16Jul 17, 2026Updated 3 months ago
- A simple packer working with all PE files which cipher your exe with a XOR implementation☆13Aug 10, 2020Updated 6 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- The Web UI for Antnium☆27Jun 14, 2022Updated 4 years ago
- Yet another IDA Pro real time syncing plugin☆16Mar 27, 2018Updated 8 years ago
- Automatically create YARA rules from malicious documents.☆210May 16, 2022Updated 4 years ago
- ☆17Jul 26, 2018Updated 8 years ago
- Zerokit shared code☆18Mar 28, 2019Updated 7 years ago
- Launch a Windows EXE file with this EXE file (application filter evasion)☆14Mar 10, 2017Updated 9 years ago
- Process injection via KernelCallbackTable☆13Jan 28, 2022Updated 4 years ago