bypass-edr topic

linWinPwn is a bash script that streamlines the use of a number of Active Directory tools

lefayjey

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

0xsp-SRD

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.

VirtualAlllocEx

Load shellcode via HELLGATE, Rewrite hellgate with .net framework for learning purpose.

Kara-4search

Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged

VirtualAlllocEx

Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

Kara-4search

frida based script which automates the process of discovering and exploiting DLL Hijacks in target binaries. The discovered binaries can later be weaponized during Red Team Operations to evade AV/EDR'...

roadwy

PowerShell script to terminate protected processes such as anti-malware and EDRs.

xiosec

Evasive Golang Loader

TunnelGRE

Windows 11 Syscall table. Ready to use in direct syscall. Actively maintained.

ikermit