The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.
☆29Mar 9, 2024Updated 2 years ago
Alternatives and similar repositories for BypassX
Users that are interested in BypassX are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- PhantomsGate: Advanced Shellcode Injection Technique☆28Jul 15, 2024Updated 2 years ago
- Demonstration of Early Bird APC Injection - MITRE ID T1055.004☆35Oct 31, 2023Updated 3 years ago
- Released presentations of my talks + code that used during these talks☆15Sep 5, 2024Updated 2 years ago
- Source generator to add D/Invoke and indirect syscall methods to a C# project.☆195Mar 4, 2024Updated 2 years ago
- Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution☆47Oct 11, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Pink BRC4 skin/theme.☆15Sep 20, 2024Updated 2 years ago
- This repo for Windows x32-x64 Kernel/User Mode Exploitation writeups and exploits☆25Oct 20, 2025Updated last year
- medor is an OSINT tool that enables you to discover a WordPress website IP behind a WAF or behind Onion Services.☆20Jul 6, 2024Updated 2 years ago
- Various resources to enhance Cobalt Strike's functionality and its ability to evade antivirus/EDR detection☆331May 17, 2024Updated 2 years ago
- Audit your Google Cloud Platform (GCP) project for LIST permissions — fast, efficient, and with visibility.☆14May 7, 2025Updated last year
- A GUI wrapper inside of Havoc to interact with bloodhound CE☆70Feb 3, 2024Updated 2 years ago
- DCSync is a python script for dumping domain users secrets☆13Dec 19, 2024Updated last year
- ☆91Jun 2, 2024Updated 2 years ago
- IAT Unhooking proof-of-concept☆33Apr 7, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A basic exemple of the API-Hashing method used by Red Teamers but also by malwares developers in C++☆36Jan 10, 2024Updated 2 years ago
- a simple poc showcasing the ability of an admin to suspend EDR's protected processes , making it useless☆40Jul 12, 2024Updated 2 years ago
- Tools for analyzing EDR agents☆280Jun 10, 2024Updated 2 years ago
- Shellcode Loader Implementing Indirect Dynamic Syscall , API Hashing, Fileless Shellcode retrieving using Winsock2☆13Jul 15, 2023Updated 3 years ago
- POC for frustrating/defeating Malware Analysts☆153Jun 12, 2022Updated 4 years ago
- all random stuff that dont warrant a seperate repo☆12Sep 2, 2022Updated 4 years ago
- PoC for downloading data by injecting into processes to evade firewalls☆35Nov 29, 2025Updated 11 months ago
- Execute shellcode files with rundll32☆229Jan 28, 2024Updated 2 years ago
- C++ Code to Patch AMSI in Remote Processes☆10Mar 11, 2025Updated last year
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Fully automated windows credentials dumper, for SAM (classic passwords) and WINHELLO (pins). Requires to be run from a linux machine with…☆80Nov 18, 2024Updated last year
- Simple BOF to read the protection level of a process☆123May 10, 2023Updated 3 years ago
- A slightly more fun way to disable windows defender☆53May 4, 2025Updated last year
- ☆416Dec 8, 2024Updated last year
- Python3 tool to perform password spraying using RDP☆17Aug 14, 2023Updated 3 years ago
- ☆11Dec 8, 2023Updated 2 years ago
- Create a Shellcode Dropper from any Windows Module☆11Apr 27, 2026Updated 6 months ago
- ☆77Feb 4, 2024Updated 2 years ago
- AV bypass while you sip your Chai!☆223May 17, 2024Updated 2 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Experimental PoC for unhooking API functions using in-memory patching, without VirtualProtect, for one specific EDR.☆14Jul 9, 2023Updated 3 years ago
- Shellcode runner to execute malicious payload and bypass AV☆14Nov 28, 2021Updated 4 years ago
- Hunt for C2 servers and phishing web sites using VirusTotal API , you can modify code to kill the malicious process☆76May 19, 2024Updated 2 years ago
- Evasive shellcode loader☆400Oct 17, 2024Updated 2 years ago
- A PoC .NET-specific process injection tool☆59Mar 17, 2024Updated 2 years ago
- Terminate AV/EDR processes by exploiting the vulnerable NsecSoft driver☆32Sep 15, 2025Updated last year
- Lifetime AMSI bypass by @ZeroMemoryEx ported to .NET Framework 4.8☆348Aug 29, 2024Updated 2 years ago