vulnableone / BypassXLinks
The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.
☆27Updated last year
Alternatives and similar repositories for BypassX
Users that are interested in BypassX are comparing it to the libraries listed below
Sorting:
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆102Updated 2 years ago
- Internal Monologue BOF☆79Updated last year
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆121Updated 6 months ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆51Updated last year
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆112Updated last month
- Do some DLL SideLoading magic☆89Updated 2 years ago
- ☆159Updated last year
- Find DLLs with RWX section☆80Updated 2 years ago
- Indirect Syscall implementation to bypass userland NTAPIs hooking.☆83Updated last year
- Impersonate Tokens using only NTAPI functions☆83Updated 9 months ago
- Two in one, patch lifetime powershell console, no more etw and amsi!☆101Updated 9 months ago
- ☆137Updated 11 months ago
- Encode shellcode into dictionary words for evasion and entropy reduction☆40Updated last month
- ☆122Updated 2 years ago
- NidhoggScript is a tool to generate "script" file that allows execution of multiple commands for Nidhogg☆50Updated last year
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆146Updated last year
- Bypass user-land hooks by syscall tampering via the Trap Flag☆138Updated 5 months ago
- Shellcode injection using the Windows Debugging API☆163Updated 3 weeks ago
- This project is an implant framework designed for long term persistent access to Windows machines.☆108Updated 2 years ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆148Updated 2 years ago
- Windows Thread Pool Injection Havoc Implementation☆33Updated last year
- EDR-Redir : a tool used to redirect the EDR's folder to another location.☆221Updated 2 months ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆118Updated last year
- Your syscall factory☆126Updated 2 weeks ago
- Mockingjay process self injection POC☆43Updated 2 years ago
- A Mythic Agent written in PIC C.☆206Updated 11 months ago
- ☆117Updated last year
- Cortex EDR Ransomware protection Bypass☆25Updated 11 months ago
- ☆151Updated 2 years ago
- Shellcode loader using direct syscalls via Hell's Gate and payload encryption.☆101Updated last year