bypass-antivirus

从零学习Webshell免杀手册

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

翻译 - 规避技术以挫败和转移安全产品的检测和预防 (AV/EDR/XDR)

一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。

shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软

助力每一位RT队员，快速生成免杀木马

Syscall免杀

🤖 Kill The Protected Process 🤖

All my Source Codes (Repos) for Red-Teaming & Pentesting + Blue Teaming

Gel4y-Mini-Shell-Backdoor-Decode

Using Thread Description To Hide Shellcode

翻译 - 使用线程描述隐藏Shellcode

Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged

.NET Antivirus Evasion Tool (Exe2Bat)

Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

翻译 - 通过文件映射加载 ntdll.dll 的新副本以绕过 API 内联挂钩。