av-bypass topic

Golang packer that use process hollowing

Enelg52

The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls

VirtualAlllocEx

An online AV evasion platform written in Springboot (Golang, Nim, C) supports embedded, local and remote loading of Shellocde methods.

yutianqaq

Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

VirtualAlllocEx

This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for local privilege escalation in the context of an unquoted service p...

VirtualAlllocEx

This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly

VirtualAlllocEx

AV bypass while you sip your Chai!

Cipher7

You open a pdf but the executable file opens (FUD)

fctsociety

FUD PDF EXPLOIT SOURCE CODE

YuVUwU

The provided Python program, Inject-EXE.py, allows you to combine a malicious executable with a legitimate executable, producing a single output executable. This output executable will contain both th...

malwarekid