45 matches found
Nimcrypt2
Nimcrypt2 Nimcrypt2 is yet another PE packer/loader designed to bypass AV/EDR. It is an improvement on my original Nimcrypt project, with the main improvements being the use of direct syscalls and the ability to load regular PE files as well as raw shellcode. Before going any further, I must...
BypassUAC
README This program is based on whitelist bypassuac. Using CS's AV-bypassing payload, you can directly get a session with UAC privileges. Usage: bypassuac.exe The demo effect is as follows whoami /priv as follows hashdump captures passwords as follows Bypass-AV Effect Windows Defender test passed...
ThreatCheck
ThreatCheck Modified version of Matterpreter's DefenderCheck. Takes a binary as input either from a file on disk or a URL, splits it until it pinpoints that exact bytes that the target engine will flag on and prints them to the screen. This can be helpful when trying to identify the specific bad...
Ninja
Quick Update to include Follina Exploitation 01/06/2022 - NinjaC2 will generate the document and serve the HTML payload . More information : https://www.linkedin.com/posts/ahmed-khlief-499321a7i-just-pushed-a-quick-update-to-ninjac2-to-activity-6937661951007170560-Tmps Ninja V2.2 Released...
Insanity-Framework
Insanity-Framework THIS PROJECT ARE CLOSED NOW - FEEL FREE TO CONTINUE IT Copyright 2017 Insanity Framework IF 2.0 END Written by: Alisson Moretto - 4w4k3 Special Thanks to Thomas Perkins - Ekultek Insanity Payload consists of encrypting your code and decrypting it in memory, thus avoiding a...
WMIHACKER
WMIHACKER（No need 445 Port） 中文版Chinese version Disclaimer: The technology involved in this project is only for security learning and defense purposes, illegal use is prohibited! Bypass anti-virus software lateral movement command execution test tool（No need 445 Port） Introduction: The common...
mcreator
mcreator エンコードされたリバースシェル生成ツール - AVをバイパスするためのテクニック インストール git clone https://github.com/blacknbunny/mcreator.git && cd mcreator/ && python mcreator.py バージョン python 2.7. スクリプト内の """ 構文のため、2.7より低くても高くても動作しません。 mcreatorコンソールの実行 python mcreator.py -rsg console コマンド...
PSSW100AVB
⚡ PSSW100AVB ⚡ PowerShell 検知回避 & サンドボックス研究 PowerShell スクリプト 100% AV バイパス PSSW100AVB リポジトリ 行動分析 • AV 研究 • 敵対的シミュレーション PSSW100AVB リポジトリの説明 このリポジトリには、リバースシェルを含むペネトレーションテスト用に設計された PowerShell スクリプト が含まれています。公開時点では、いずれのスクリプトもアンチウイルスシステムに検知されていませんでした。ただし、公開から通常 2～3...
Java-Shellcode-Loader
Java ShellCode Loader JavaベースのShellCodeローダーで、32ビットおよび64ビットのプラットフォームに対応しています。 中核となる原理は、Jnaを使用してWindows APIを呼び出し、shellcodeの注入を実現することです。 実行環境：Jre = 1.5 注：本プロジェクトは、yzddmr6/As-ExploitsのShellCodeLoaderモジュールに組み込まれています。 コンパイル maven package 使用方法 デフォルトではランダムに32ビットプロセスへ注入されるため、32ビットのshellcodeを使用してください java...
TheFatRat
TheFatRat A Massive Exploiting Tool TheFatRat is an exploiting tool which compiles a malware with famous payload, and then the compiled maware can be executed on Linux , Windows , Mac and Android. TheFatRat Provides An Easy way to create Backdoors and Payload which can bypass most anti-virus...
PEzor-Docker
PEzor-Docker このKali Linuxイメージを使えば、システム上で簡単にPEzorにアクセスできます！ 基本的に、このイメージはkalilinux/kali-rollingイメージから構築され、その上にPEzorのシェルコードとPEパッカーがインストールされています。PEzorへのアクセスは特にポストエクスプロイトフェーズで重要ですが、必要な依存関係のためにホストやVMにインストールするのは時間がかかります。とはいえ、このDockerイメージはこの問題を解決し、PEzorに迅速にアクセスする方法を提供するために作成されました。 追記:...
Dr0p1t-Framework
Not maintained currently Wait for the next version Dr0p1t-Framework Have you ever heard about trojan droppers ? In short dropper is type of malware that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks Trust me :D ...
dvenom
🐍 Double Venom DVenom Double Venom DVenom is a tool that helps red teamers bypass AVs by providing an encryption wrapper and loader for your shellcode. 🚀 Features 🛡️ Capable of bypassing some well-known antivirus AVs. 🔒 Offers multiple encryption methods including RC4, AES256, XOR, and ROT. 🏗️...
bypass360mimikatz_x64
方法：リソース変更、デジタル署名追加 解凍パスワード：6613kris清水川崎...
CVE-2022-26122
An insufficient verification of data authenticity vulnerability CWE-345 in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64...
CVE-2022-26122: Insufficient Verification of Data Authenticity
An insufficient verification of data authenticity vulnerability CWE-345 in FortiClient, FortiMail and FortiOS AV engines version 6.2.168 and below and version 6.4.274 and below may allow an attacker to bypass the AV engine via manipulating MIME attachment with junk and pad characters in base64...
Injector - Complete Arsenal Of Memory Injection And Other Techniques For Red-Teaming In Windows
Complete Arsenal of Memory injection and other techniques for red-teaming in Windows What does Injector do? Process injection support for shellcode located at remote server as well as local storage. Just specify the shellcode file and it will do the rest. It will by default inject into notepad.ex...
CVE-2021-26718
CVE-2021-26718 concerns Kaspersky Internet Security (KIS) for macOS where AV bypass could occur via an XPC service. Public details describe an improper client verification in the system extension’s XPC communication (IPCService) that allowed a normal user to interact with the XPC service, inject ...
