vulnableone / BypassXLinks
The Swiss army knife of evasion tool that bypasses AMSI, Applocker, and CLM mode simultaneously.
☆27Updated last year
Alternatives and similar repositories for BypassX
Users that are interested in BypassX are comparing it to the libraries listed below
Sorting:
- DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.☆100Updated 2 years ago
- Two in one, patch lifetime powershell console, no more etw and amsi!☆99Updated 7 months ago
- Internal Monologue BOF☆78Updated 11 months ago
- template for developing custom C2 channels for Cobalt Strike using IAT hooks applied by a reflective loader.☆94Updated last week
- Windows Thread Pool Injection Havoc Implementation☆33Updated last year
- ☆136Updated 10 months ago
- Find DLLs with RWX section☆80Updated 2 years ago
- Impersonate Tokens using only NTAPI functions☆83Updated 8 months ago
- A version of NetLoader, Execute Assemblies and Bypass ETW and AMSI using Hardware Breakpoints☆118Updated 5 months ago
- IronSharpPack is a repo of popular C# projects that have been embedded into IronPython scripts that execute an AMSI bypass and then refle…☆119Updated last year
- A hoontr must hoont☆102Updated 3 weeks ago
- A Beacon Object File (BOF) that performs the complete ESC1 attack chain in a single execution: certificate request with arbitrary SAN (+S…☆76Updated this week
- Lateral Movement Bof with MSI ODBC Driver Install☆141Updated 2 months ago
- Resources linked to my presentation at OffensiveX in Athens in June 2024 on the topic "Breach the Gat, Advanced Initial Access in 2024"☆146Updated last year
- Do some DLL SideLoading magic☆89Updated 2 years ago
- This is the combination of multiple evasion techniques to evade defenses. (Dirty Vanity)☆51Updated last year
- A python script that automates a C2 Profile build☆48Updated this week
- ☆109Updated 10 months ago
- A variation of ProcessOverwriting to execute shellcode on an executable's section☆147Updated 2 years ago
- .NET assembly loader with patchless AMSI and ETW bypass in Rust☆57Updated last year
- WTSImpersonator utilizes WTSQueryUserToken to steal user tokens by abusing the RPC Named Pipe "\\pipe\LSM_API_service"☆121Updated last year
- Adversary Emulation Framework☆128Updated 5 months ago
- A BOF to retrieve decryption keys for WhatsApp Desktop and a utility script to decrypt the databases.☆87Updated 9 months ago
- Mockingjay process self injection POC☆42Updated 2 years ago
- Bypass user-land hooks by syscall tampering via the Trap Flag☆135Updated 3 months ago
- Cortex EDR Ransomware protection Bypass☆25Updated 10 months ago
- Lateral movement with DCOM DLL hijacking☆174Updated 5 months ago
- adws enumeration bof☆160Updated 2 months ago
- ☆122Updated 2 years ago
- Lateral Movement via the .NET Profiler☆84Updated last year