vxunderground / VXUG-Papers
Research code & papers from members of vx-underground.
☆1,233Updated 3 years ago
Alternatives and similar repositories for VXUG-Papers
Users that are interested in VXUG-Papers are comparing it to the libraries listed below
Sorting:
- Collection of various malicious functionality to aid in malware development☆1,641Updated last year
- Resources for Windows exploit development☆1,573Updated 3 years ago
- A post exploitation framework designed to operate covertly on heavily monitored environments☆2,095Updated 3 years ago
- Malware samples, analysis exercises and other interesting resources.☆1,552Updated last year
- AV/EDR evasion via direct system calls.☆1,866Updated 2 years ago
- Scans all running processes. Recognizes and dumps a variety of potentially malicious implants (replaced/implanted PEs, shellcodes, hooks,…☆2,157Updated last month
- ☆2,097Updated 2 years ago
- Organized list of my malware development resources☆1,561Updated 2 years ago
- Identifies the bytes that Microsoft Defender flags on.☆2,442Updated last year
- A Windows kernel-mode rootkit that abuses legitimate communication channels to control a machine.☆702Updated 4 years ago
- ☆1,643Updated 8 months ago
- A modern 32/64-bit position independent implant template☆1,206Updated last month
- Some of my publicly available Malware analysis and Reverse engineering.☆810Updated 11 months ago
- ScareCrow - Payload creation framework designed around EDR bypass.☆2,813Updated last year
- Anti-virus artifacts. Listing APIs hooked by: Avira, BitDefender, F-Secure, MalwareBytes, Norton, TrendMicro, and WebRoot.☆737Updated 3 years ago
- Nidhogg is an all-in-one simple to use windows kernel rootkit.☆1,975Updated 3 weeks ago
- A collection of awesome Command & Control (C2) frameworks, tools and resources for post-exploitation and red teaming assignments.☆847Updated 4 years ago
- This program is designed to demonstrate various process injection techniques☆1,142Updated last year
- Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.☆1,193Updated 11 months ago
- Template-Driven AV/EDR Evasion Framework☆1,676Updated last year
- Open-Source Shellcode & PE Packer☆1,945Updated last year
- Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.☆1,498Updated 3 years ago
- A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.☆1,914Updated 2 months ago
- Gets updates from various clearnet domains and ransomware threat actor domains☆390Updated last year
- A not so awesome list of malware gems for aspiring malware analysts☆805Updated 2 years ago
- Process Herpaderping proof of concept, tool, and technical deep dive. Process Herpaderping bypasses security products by obscuring the in…☆1,135Updated last year
- DeimosC2 is a Golang command and control framework for post-exploitation.☆1,118Updated 3 weeks ago
- Bringing you the best of the worst files on the Internet.☆329Updated 4 years ago
- This repo contains some Amsi Bypass methods i found on different Blog Posts.☆1,904Updated 5 months ago
- A tool to kill antimalware protected processes☆1,442Updated 3 years ago