edr-bypass topic

A C2 framework for initial access in Go

dobin

Template-Driven AV/EDR Evasion Framework

klezVirus

This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and download and execute your C2-shellcode which is hosted on your (C2)...

VirtualAlllocEx

Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.

njcve

A Highly capable Pe Packer

NUL0x4C

Depending on the AV/EDR we will check which Windows APIs are hooked by the AV/EDR

VirtualAlllocEx

Awesome EDR Bypass Resources For Ethical Hacking

tkmru

indirect syscalls for AV/EDR evasion in Go assembly

f1zm0

Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"

CodeXTF2

Nim process hollowing loader

itaymigdal