edr-evasion · GitHub Topics

Xacone / BestEdrOfTheMarket

EDR Lab for Experimentation Purposes

edr defense-evasion edr-evasion edr-testing kernel-driver

C++ 1.34 k

2 个月前

klezVirus / SilentMoonwalk

PoC Implementation of a fully dynamic call stack spoofer

av-evasion edr-evasion thread-stack stack-spoofing

C++ 830

1 年前

VirtualAlllocEx / DEFCON-31-Syscalls-Workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

antivirus-bypass antivirus-evasion edr-bypass edr-evasion malware-development windows-internals direct-syscalls indirect-syscalls malware-analysis malware-development-guide workshop shellcode-loader syscalls Shell

C 695

4 个月前

Accenture / Codecepticon

.NET/PowerShell/VBA Offensive Security Obfuscator

antivirus-evasion C#edr-evasion obfuscation PowerShell VBA accenture-security

C# 506

2 年前

pard0p / CallstackSpoofingPOC

C++ self-Injecting dropper based on various EDR evasion techniques.

av-evasion dropper edr-evasion indirect-syscall

C 391

2 年前

f1zm0 / hades

Go shellcode loader that combines multiple evasion techniques

av-evasion edr-evasion Go pentesting red-teaming ntdll syscalls evasion adversary-emulation offensive-security

Go 381

2 年前

Kudaes / EPI

Threadless Process Injection through entry point hijacking

Hacking redteam Rust Windows edr-evasion

Rust 349

1 年前

Kudaes / Unwinder

Call stack spoofing for Rust

edr-evasion hacking-tool Rust

Rust 346

7 个月前

f1zm0 / acheron

indirect syscalls for AV/EDR evasion in Go assembly

evasion adversary-emulation av-evasion edr-bypass edr-evasion malware-research offensive-security red-team red-teaming Assembly Go

Assembly 338

2 年前

naksyn / PythonMemoryModule

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

edr-evasion evasion Hacking memory-module memorymodule Python redteam redteam-tools redteaming runpe

Python 328

1 年前

Kudaes / Split

Apply a divide and conquer approach to bypass EDRs

edr-evasion fork Rust Windows

Rust 287

2 年前

VirtualAlllocEx / Payload-Download-Cradles

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.

antivirus-evasion edr-evasion bypass-antivirus bypass-edr payload

PowerShell 257

3 年前

naksyn / DojoLoader

Generic PE loader for fast prototyping evasion techniques

cobalt-strike edr-evasion evasion pe-loader red-team-tools red-teaming

C 235

1 年前

VirtualAlllocEx / Direct-Syscalls-vs-Indirect-Syscalls

The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls

av-bypass av-evasion direct-syscalls edr-bypass edr-evasion indirect-syscalls shellcode-loader

C 208

2 年前

V-i-x-x / kernel-callback-removal

kernel callback removal (Bypassing EDR Detections)

edr edr-bypass edr-evasion Kernel

C++ 190

6 个月前

oldkingcone / BYOSI

Evade EDR's the simple way, by not touching any of the API's they hook.

edr-bypass edr-evasion PHP PowerShell redteam

PHP 154

8 个月前

VirtualAlllocEx / Direct-Syscalls-A-journey-from-high-to-low

Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

av-bypass av-evasion direct-syscalls edr-bypass edr-evasion

C 141

2 年前

Offensive-Panda / DefenseEvasionTechniques

This comprehensive and central repository is designed for cybersecurity enthusiasts, researchers, and professionals seeking to stay ahead in the field. It provides a valuable resource for those dedica...

cyber-threat-intelligence edr-evasion malware-development malware-research offensivesecurity

C++ 131

4 个月前