av-bypass

There are 9 repositories under av-bypass topic.

LordNoteworthy / al-khaser
Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.
anti-analysis anti-debugging anti-sandbox anti-vm anti-emulation code-injection malware timing-attacks av-bypass sandbox-evasion anti-disassembly
Language:C++ 5557
inceptor
klezVirus / inceptor
Template-Driven AV/EDR Evasion Framework
obfuscation pinvoke dinvoke code-injection process-injection av-bypass amsi-bypass av-evasion edr-bypass pe-packer amsi-evasion red-team red-teaming av-edr-bypass payload-generator
Language:Assembly 1502
hlldz / SpookFlare
Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
av-bypass loader dropper av-evasion endpoint-bypass antivirus-evasion antivirus-testing obfuscation bypass
Language:Python 943
alphaSeclab / anti-av
Resources About Anti-Virus and Anti-Anti-Virus, including 200+ tools and 1300+ posts
anti-virus anti-av av-bypass
413
OSRipper
SubGlitch1 / OSRipper
AV evading OSX Backdoor and Crypter Framework
backdoor python fud antivirus-evasion antivirus-testing rat backdoorpython malware malware-development av-bypass crypter crypter-fud silent-miner miner keylogger
Language:Python 254
yutianqaq / AVEvasionCraftOnline
An online AV evasion platform written in Springboot (Golang, Nim, C) supports embedded, local and remote loading of Shellocde methods.
bypass bypass-antivirus online redteam redteam-tools antivirus-evasion av-bypass av-evasion golang redteaming
Language:Go 201
VirtualAlllocEx / Direct-Syscalls-vs-Indirect-Syscalls
The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls
av-bypass av-evasion direct-syscalls edr-bypass edr-evasion indirect-syscalls shellcode-loader windows-int
Language:C 123
VirtualAlllocEx / Direct-Syscalls-A-journey-from-high-to-low
Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).
av-bypass av-evasion direct-syscalls edr-bypass edr-evasion
Language:C 119
njcve / inflate.py
Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.
antivirus antivirus-evasion av-bypass av-evasion bugbounty edr-bypass endpoint-security evasion-attack
Language:Python 115
Sn1r / Nim-Reverse-Shell
A simple and stealthy reverse shell written in Nim that bypasses Windows Defender detection. This tool allows you to establish a reverse shell connection with a target system. Use responsibly for educational purposes only.
antivirus-bypass antivirus-evasion av-bypass av-evasion nim nim-lang reverse-shell
Language:Nim 54
VirtualAlllocEx / DSC_SVC_REMOTE
This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for local privilege escalation in the context of an unquoted service path, etc. The payload itself can be remotely hosted, downloaded via the wininet library and then executed via direct system calls.
av-bypass av-evasion direct-syscalls edr-bypass edr-evasion
Language:C 47
hackerOrionX / ORIONX-FUD-CRYPTER
The only FREE and 100% FUD crypter that will still FUD, work on Windows. Powerfull obfuscator to bypass Anti-Viruses detection.
fud fud-crypter obfuscator anti-virus anti-viruses av-bypass av-evasion crypter crypter-defender crypter-fud easy-to-use free hacking hacking-tool open-source windows windows-10
Language:Tcl 39
1captainnemo1 / DLLREVERSESHELL
A CUSTOM CODED FUD DLL, CODED IN C , WHEN LOADED , VIA A DECOY WEB-DELIVERY MODULE( FIRING A DECOY PROGRAM), WILL GIVE A REVERSE SHELL (POWERSHELL) FROM THE VICTIM MACHINE TO THE ATTACKER CONSOLE , OVER LAN AND WAN.
reverse-shell fud evade av-evasion av-bypass custom-reverseshell c-reverseshell backdoor-attacks backdoors-created malware-sample antivirus-evasion antiviral-resistance trojan-malware trojan-rat trojan
Language:C 34
1captainnemo1 / PersistentCReverseShell
A PERSISTENT FUD Backdoor ReverseShell coded in C for any Windows distro, that will make itself persistent on every BOOT and fire a decoy app in the foreground while connecting back to the attacker machine as a silent background process , spawning a POWERSHELL on the attacker machine.
reverseshell persistence fud evasion av-bypass av-evasion bypass-antivirus complete-fud persistent-on-boot
Language:C 33
Enelg52 / Backpack
Golang packer that use process hollowing
av-bypass av-evasion golang packer
Language:Go 16
VirtualAlllocEx / Create_Thread_Inline_Assembly_x86
This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly
av-bypass av-evasion edr-bypass edr-evasion inline-assembly
Language:C++ 15
Souhardya / IMProtector
Old 32 bit PE executable protector / crypter
anti-debug av-bypass av-evasion crypter malware malware-research windows
Language:C++ 12
VirtualAlllocEx / Shell-we-Assembly
Shellcode execution via x86 inline assembly based on MSVC syntax
av-bypass av-evasion edr-bypass edr-evasion inline-assembly windows-internals
Language:C++ 11
x0reaxeax / KillHandles
Closes handles of a remote process in attempt to crash it
av-bypass bypass-antivirus close-handle crash dos redteam windows
Language:C 9
x0reaxeax / SyscallHookBypass
NTAPI hook bypass with (semi) legit stack trace
antihooking av-bypass av-evasion edr-bypass windows hook-bypass x86 indirect-syscall detection-evasion redteam
Language:C 9
VirtualAlllocEx / Create_Thread-Inline_Assembly_x86_Fibers
This POC provides the ability to execute x86 shellcode in the form of a .bin file based on x86 inline assembly and execution over fibers
av-bypass av-evasion edr-bypass edr-evasion inline-assembly
Language:C++ 6
Lucas310302 / Coin-Nest
XMR Miner Malware
av-bypass av-evasion malware miner monero monero-mining persistance privelage-escalation python xmr
Language:Python 5
v-lavrentikov / obfuscator
Binary obfuscation, anti-reversing, anti-debugging and av-bypass framework for Windows
anti-analysis anti-debugging anti-disassembly anti-reversing anti-sandbox av-bypass framework malware obfuscation windows
Language:Go 5
mauricelambert / ReverseShell
This package implements an advanced reverse shell console (supports: TCP, UDP, IRC, HTTP and DNS).
dns http irc pypi-package python3 reverse-shell tcp udp console netcat terminal av-bypass c2 command-and-control cryptolocker malware
Language:Python 4
shaddy43 / XOR_Shellcode_Encryptor
This repository contains xor shellcode encryptor that is used to bypass static or signature based detection of malicious shellcodes for Process Injection exploits
shellcode encryptor av-bypass static-analysis xor
Language:C# 4
OlivierLaflamme / custom_binary_for_reverseshell
custom binary reverseshell in C#
custom shell reverse-shell av-bypass
Language:C# 3
Queered / FUD-ReverseShell
IRC likely reverse shell
antivirus-evasion av av-bypass botnet c2 fud irc reverse-shell
Language:JavaScript 3
bobby-tablez / Heuristic-Confuser
Sandbox/Heuristic PowerShell Bypass
av-bypass av-evasion obfuscation obfuscator powershell sandbox-detection sandbox-evasion hacker-tool hacking hacking-tool malware
Language:PowerShell 2
KOZ1OL / SAVITAR
Savitar is powerfull tool be carefull !
av-bypass ransomware savitar virus
2
sinatamari / CPPowershell
AV-Bypass using Encryption and Dynamic API Call in CPP
av-bypass powershell reverse-shell
Language:C++ 1
digilolnet / pint-c2
eBPF evading C2
av-bypass av-evasion c2 ebpf rat
Language:Python 0
KlausMueller1996 / Metasploit_GenericEncoders
Collection of Generic Metasploit Encoder to avoid AV RegEx Pattern Matching
av-bypass encoder metasploit
Language:Ruby 0

av-bypass

LordNoteworthy / al-khaser

klezVirus / inceptor

hlldz / SpookFlare

alphaSeclab / anti-av

SubGlitch1 / OSRipper

yutianqaq / AVEvasionCraftOnline

VirtualAlllocEx / Direct-Syscalls-vs-Indirect-Syscalls

VirtualAlllocEx / Direct-Syscalls-A-journey-from-high-to-low

njcve / inflate.py

Sn1r / Nim-Reverse-Shell

VirtualAlllocEx / DSC_SVC_REMOTE

hackerOrionX / ORIONX-FUD-CRYPTER

1captainnemo1 / DLLREVERSESHELL

1captainnemo1 / PersistentCReverseShell

Enelg52 / Backpack

VirtualAlllocEx / Create_Thread_Inline_Assembly_x86

Souhardya / IMProtector

VirtualAlllocEx / Shell-we-Assembly

x0reaxeax / KillHandles

x0reaxeax / SyscallHookBypass

VirtualAlllocEx / Create_Thread-Inline_Assembly_x86_Fibers

Lucas310302 / Coin-Nest

v-lavrentikov / obfuscator

mauricelambert / ReverseShell

shaddy43 / XOR_Shellcode_Encryptor

OlivierLaflamme / custom_binary_for_reverseshell

Queered / FUD-ReverseShell

bobby-tablez / Heuristic-Confuser

KOZ1OL / SAVITAR

sinatamari / CPPowershell

digilolnet / pint-c2

KlausMueller1996 / Metasploit_GenericEncoders