Shhhloader

Shhhloader Shhhloader is a work in progress shellcode loader. It takes raw shellcode as input and compiles a C++ stub that does a bunch of different things to try and bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. 1/25/24 EDIT: Shhhloader no...

inceptor

🚩 This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/ 🚩 Sponsors If you want to sponsors this project and have the latest updates on Inceptor, latest issues fixed, latest features, please support us on...

hades

Acerca de Hades es un loader de prueba de concepto que combina varias técnicas de evasión con el objetivo de eludir los mecanismos defensivos comúnmente utilizados por los AV/EDR modernos. Uso La forma más sencilla es probablemente construir el proyecto en Linux usando make. root@kitploit: git...

NewPowerDNS

NewPowerDNS NewPowerDNS 是 @domchell 的 PowerDNS 的更新版本。新增的主要功能是支持使用 DNS A 记录传输文件。以下是所做修改的完整列表： 支持通过 DNS A 记录传输 Gzip 压缩以减小文件传输体积 支持传输所有类型的文件 新的 stager，可轻松混淆或逐行运行，以绕过 AV/EDR 的拦截 可选择打印、执行或保存传输的文件 从 python2 更新到 python3 除 python3 外，唯一的依赖项是 scapy。可通过 pip 轻松安装，如下所示： root@kitploit: python3 -m pip install...

Voidgate

VOIDGATE 描述： 一种可用于绕过 AV/EDR 内存扫描器的技术。通过执行对单个加密汇编指令的即时解密，可以用来隐藏众所周知且已被检测的 shellcode（如 msfvenom），从而使内存扫描器对该特定内存页失效。 工作原理： 该技术将创建一个PAGEEXECUTEREADWRITE内存区域，用于存储加密的汇编指令。shellcode 周围会包裹一些填充字节。程序将在 shellcode 的入口点设置一个硬件断点（HWBP）。 接下来，程序将安装一个向量化异常处理程序（VEH）。该 VEH 基本上就像一个调试器，对代码进行单步执行，针对 VEH 接收到的每个SINGLE...

RecycledInjector - Native Syscalls Shellcode Injector

Currently Fully Undetected same-process native/.NET assembly shellcode injector based on RecycledGate by thefLink, which is also based on HellsGate + HalosGate + TartarusGate to ensure undetectable native syscalls even if one technique fails. To remain stealthy and keep entropy on the final...

Shhhloader - SysWhispers Shellcode Loader

Shhhloader is a SysWhispers Shellcode Loader that is currently a Work in Progress. It takes raw shellcode as input and compiles a C++ stub that has been integrated with SysWhispers in order to bypass AV/EDR. The included python builder will work on any Linux system that has Mingw-w64 installed. T...