(Translated by https://www.hiragana.jp/)
av-bypass · GitHub Topics · GitHub

#

av-bypass

Here are 43 public repositories matching this topic...

LordNoteworthy / al-khaser

Public malware techniques used in the wild: Virtual Machine, Emulation, Debuggers, Sandbox detection.

malware code-injection timing-attacks anti-debugging anti-analysis anti-sandbox anti-vm anti-emulation av-bypass sandbox-evasion anti-disassembly

Updated Oct 6, 2024
C++

inceptor

klezVirus / inceptor

Template-Driven AV/EDR Evasion Framework

obfuscation pinvoke code-injection red-team payload-generator av-evasion av-bypass red-teaming process-injection amsi-bypass pe-packer dinvoke amsi-evasion edr-bypass av-edr-bypass

Updated Nov 3, 2023
Assembly

hlldz / SpookFlare

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

obfuscation loader bypass dropper antivirus-evasion av-evasion av-bypass antivirus-testing endpoint-bypass

Updated May 8, 2019
Python

alphaSeclab / anti-av

Resources About Anti-Virus and Anti-Anti-Virus, including 200+ tools and 1300+ posts

anti-virus av-bypass anti-av

Updated May 25, 2020

yutianqaq / AVEvasionCraftOnline

An online AV evasion platform written in Springboot (Golang, Nim, C) supports embedded, local and remote loading of Shellocde methods.

golang online bypass bypass-antivirus antivirus-evasion av-evasion redteaming redteam av-bypass redteam-tools

Updated May 5, 2024
Go

OSRipper

SubGlitch1 / OSRipper

AV evading OSX Backdoor and Crypter Framework

python backdoor malware miner rat keylogger malware-development backdoorpython crypter fud antivirus-evasion av-bypass antivirus-testing silent-miner crypter-fud

Updated Feb 28, 2024
Python

thomasxm / BOAZ_beta

Multilayered AV/EDR Evasion Framework

obfuscation code-injection antivirus-evasion payload-generator av-evasion av-bypass red-teaming process-injection boaz pe-packer edr-bypass av-edr-bypass red-teaming-tools etw-bypass red-ream

Updated Sep 3, 2024
C++

Cipher7 / ChaiLdr

AV bypass while you sip your Chai!

malware loader malware-development av-evasion av-bypass red-teaming

Updated May 17, 2024
C

VirtualAlllocEx / Direct-Syscalls-vs-Indirect-Syscalls

The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls

shellcode-loader av-evasion av-bypass windows-int edr-bypass edr-evasion direct-syscalls indirect-syscalls

Updated Jan 20, 2024
C

VirtualAlllocEx / Direct-Syscalls-A-journey-from-high-to-low

Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

av-evasion av-bypass edr-bypass edr-evasion direct-syscalls

Updated May 6, 2023
C

njcve / inflate.py

Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.

antivirus bugbounty antivirus-evasion av-evasion av-bypass endpoint-security evasion-attack edr-bypass

Updated Apr 9, 2022
Python

Cipher7 / ApexLdr

ApexLdr is a DLL Payload Loader written in C

malware loader threadpool shellcode-loader av-evasion av-bypass red-teaming dll-unhooking dll-sideloading indirect-syscall

Updated Jul 17, 2024
C

Sn1r / Nim-Reverse-Shell

A simple and stealthy reverse shell written in Nim that bypasses Windows Defender detection. This tool allows you to establish a reverse shell connection with a target system. Use responsibly for educational purposes only.

nim reverse-shell nim-lang antivirus-evasion av-evasion av-bypass antivirus-bypass

Updated Jan 23, 2024
Nim

VirtualAlllocEx / DSC_SVC_REMOTE

This code example allows you to create a malware.exe sample that can be run in the context of a system service, and could be used for local privilege escalation in the context of an unquoted service path, etc. The payload itself can be remotely hosted, downloaded via the wininet library and then executed via direct system calls.

av-evasion av-bypass edr-bypass edr-evasion direct-syscalls

Updated May 8, 2023
C

1captainnemo1 / DLLREVERSESHELL

A CUSTOM CODED FUD DLL, CODED IN C , WHEN LOADED , VIA A DECOY WEB-DELIVERY MODULE( FIRING A DECOY PROGRAM), WILL GIVE A REVERSE SHELL (POWERSHELL) FROM THE VICTIM MACHINE TO THE ATTACKER CONSOLE , OVER LAN AND WAN.

reverse-shell trojan fud antivirus-evasion av-evasion malware-sample evade trojan-rat av-bypass backdoors-created trojan-malware backdoor-attacks antiviral-resistance custom-reverseshell c-reverseshell

Updated Jun 4, 2019
C

1captainnemo1 / PersistentCReverseShell

A PERSISTENT FUD Backdoor ReverseShell coded in C for any Windows distro, that will make itself persistent on every BOOT and fire a decoy app in the foreground while connecting back to the attacker machine as a silent background process , spawning a POWERSHELL on the attacker machine.

persistence evasion reverseshell bypass-antivirus fud av-evasion av-bypass complete-fud persistent-on-boot

Updated May 28, 2019
C

malwarekid / Inject-EXE

The provided Python program, Inject-EXE.py, allows you to combine a malicious executable with a legitimate executable, producing a single output executable. This output executable will contain both the malicious and legitimate executables.

malware python3 packer-builder evasion bypass exe exe-packer av-bypass malware-packers malware-bypass inject-exe antivirus-bypass bind-exe

Updated Jun 30, 2024
Python

VirtualAlllocEx / Create_Thread_Inline_Assembly_x86

This POC provides the possibilty to execute x86 shellcode in form of a .bin file based on x86 inline assembly

inline-assembly av-evasion av-bypass edr-bypass edr-evasion

Updated Apr 17, 2023
C++

Enelg52 / Backpack

Golang packer that use process hollowing

golang packer av-evasion av-bypass

Updated May 1, 2022
Go

Souhardya / IMProtector

Old 32 bit PE executable protector / crypter

windows malware malware-research crypter av-evasion av-bypass anti-debug

Updated Nov 29, 2021
C++

Improve this page

Add a description, image, and links to the av-bypass topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the av-bypass topic, visit your repo's landing page and select "manage topics."