bypass-antivirus

  从零学习Webshell免杀手册

  evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

翻译 - 规避技术以挫败和转移安全产品的检测和预防 (AV/EDR/XDR)

  一款红队专用免杀木马生成器，基于shellcode生成绕过所有杀软的木马。

  shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软

  助力每一位RT队员，快速生成免杀木马

  Syscall免杀

  🤖 Kill The Protected Process 🤖

  All my Source Codes (Repos) for Red-Teaming & Pentesting + Blue Teaming

  Gel4y-Mini-Shell-Backdoor-Decode

  Using Thread Description To Hide Shellcode

翻译 - 使用线程描述隐藏Shellcode

  Depending on the AV/EPP/EDR creating a Taskschedule Job with a default cradle is often flagged

  .NET Antivirus Evasion Tool (Exe2Bat)

  Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

翻译 - 通过文件映射加载 ntdll.dll 的新副本以绕过 API 内联挂钩。