primody Goto Github PK

.netconfigloader

.net config loader

above

Invisible network protocol sniffer

aescrypt

AES-256 Microsoft Cryptography API Example Use.

amsi-reaper

andkittyinjector

Inject a shared library into a process using ptrace

apc-injection

Process Injection: APC Injection

api-patcher

Api Patcher is a straightforward tool leveraging API hooking to patch and modify certain behaviors in a targeted environment.

apollo

A .NET Framework 4.0 Windows Agent

athena

atlasldr

Reflective x64 PE/DLL Loader implemented using Dynamic Indirect Syscalls

avet

AntiVirus Evasion Tool

avred

Analyse your malware to surgically obfuscate it

be_shellcode_dump

December 2023 BattlEye shellcode dump

bedaisy-bypass

BEDaisy.sys report bypass

beepsyscall

An adaptation of timwhitez's proxycall that uses kernelbase.dll!Beep.

bestedrofthemarket

Little AV/EDR bypassing lab for training & learning purposes

bobthesmuggler

"Bob the Smuggler": A tool that leverages HTML Smuggling Attack and allows you to create HTML files with embedded 7z/zip archives. The tool would compress your binary (EXE/DLL) into 7z/zip file format, then XOR encrypt the archive and then hides inside PNG/GIF image file format (Image Polyglots).

browser-firewall

Block any extension or website from accessing network

bypassav

This map lists the essential techniques to bypass anti-virus and EDR

callback_shellcode_injection

POCs for Shellcode Injection via Callbacks

callstack_spoof

callstackspoofingpoc

C++ self-Injecting dropper based on various EDR evasion techniques.

caro-kann

Encrypted shellcode Injection to avoid Kernel triggered memory scans

checkmate

payload Execution by Fake Windows SmartScreen with requires Administrator privileges & Turn off real SmartScreen Filter

chimera

Automated DLL Sideloading Tool With EDR Evasion Capabilities

christmas

clr_heap_encryption

codecave-hook

codecave hook reverse engineering toolkit.

coercedpotato

coercedpotatordll

Reflective DLL to privesc from NT Service to SYSTEM using SeImpersonateToken privilege