EvilBytecode

GoRedOps

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

GoDefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

EDR-XDR-AV-Killer

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

Lifetime-Amsi-EtwPatch

Two in one, patch lifetime powershell console, no more etw and amsi!

ThunderKitty

🔑 Open source stealer written in Go, all logs will be sent to Telegram bot.

Shellcode-Loader

This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.

Lifetime-AmsiBypass

Lifetime AMSI bypass.

PayloadCrypter

Go Based Crypter That Can Bypass Any Kinds Of Antivirus Products, payload crypter supports over 4 programming languages.

PyDefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package.

PPID-Spoofing

Parent Process ID Spoofing, coded in CGo.

Keylogger

Go keylogger for Windows, logging keyboard input to a file using Windows API functions, and it is released under the Unlicense.

Go-Assembly

Examples how to use a Assm (Assembly) in a go.

ThunderKitty-Ransomware

Ransomware written in go, encrypt - decrypt.

PS2BAT

A Documentation for my module PS2BAT, it converts Powershell Scripts to Batchfile ones.

GolangStyle

GolangStyle, best looking go library.

GoEvilDocs

Malware development in Go, learn today, anti dynamic analysis & Static & sandboxes.

Evil-Go

A malicous Golang Package

Powershell-Persistance

Whenever PowerShell is launched, Notepad will also open. You can customize the script for educational purposes, but I emphasize that I do not take any responsibility for its use or any actions taken.

Bloxstrap-Persistance

Bloxstrap-Persistance modifies Bloxstrap's settings (Settings.json) to add persistent integrations, showcasing how applications can be exploited.

ETW-Patch

code snippet provided demonstrates how to patch the EtwEventWrite function in the ntdll.dll library on Windows using CGO (C Go).

Evilbytecode

CMD-Persistence

PoC, everytime you launch cmd, notepad does aswell (EXAMPLE PROCESS)