edr-bypass topic

This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for local privilege escalation in the context of an unquoted service p...

VirtualAlllocEx

This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly

VirtualAlllocEx

PoC arbitrary WPM without a process handle

x0reaxeax

"AMSI WRITE RAID" Vulnerability that leads to an effective AMSI BYPASS

V-i-x-x

Abusing Windows fork API and OneDrive.exe process to inject the malicious shellcode without allocating new RWX memory region.

Offensive-Panda