usbsas

usbsas is a free and open source GPLv3 tool and framework for securely reading untrusted USB mass storage devices. Overview Following the concept of defense in depth and the principle of least privilege, usbsas's goal is to reduce the attack surface of the USB stack. To achieve this, most of the...

crypter

Crypter This Crypter is written in python 3, which can be used to obfusticate, encrypt the python source code to bypass AntiVirus. Also Capable to Bypass VM such as VirtualBox, VMware, Sandboxie. Uses AES-256 bit Encryption & Base64 Encoding to Encrypt the Source Code for Twice. 3 Powerfull Metho...

whids

IMPORTANT: this README and other documentation is not updated to reflect the changes made to latest beta releases as a lot of changes happened. All this will be updated in time when a stable version will be released see Roadmap until next release. Feel free to run beta releases on your own and as...

pompelmi

pompelmi — ClamAV Antivirus Scanning for Node.js ClamAV antivirus scanning for Node.js — clean, typed, zero dependencies. !Scanned by...

avpass

AVPASS AVPASS is a tool for leaking the detection model of Android malware detection systems i.e., antivirus software, and bypassing their detection logics by using the leaked information coupled with APK obfuscation techniques. AVPASS is not limited to detection features used by detection system...

AVBypass

antivirus bypass protection requirements golang installed usage 1 - create your payload go run create.go e.g: go run create.go 1.1.1.1 443 SecRetkira https://www.youtube.com/watch?v=Rv4VzpGCEEM 2 - in output folder you will find shell.go compile it go build shell.go 3 - now you have exe file to...

HydraDragonAntivirus

Hydra Dragon Antivirus WARNING: Highly outdated documenation here but for reference I keep it. Other than OpenEDR, MBRFilter, Sanctum etc. directories are fully deperecated for performance. 📚 For detailed documentation, architecture diagrams, and component guides, visit our Project Wiki. 🎥 POC:...

foolav

foolav Executable compiled with this code is useful during penetration tests where there is a need to execute some payload meterpreter maybe? while being certain that it will not be detected by antivirus software. The only requirement is to be able to upload two files: binary executable and paylo...

avcleaner

avcleaner C/C++ source obfuscator for antivirus bypass Blog posts The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM...

Chimera

Chimera is a shiny and very hack-ish PowerShell obfuscation script designed to bypass AMSI and antivirus solutions. It digests malicious PS1's known to trigger AV and uses string substitution and variable concatenation to evade common detection signatures. Chimera was created for this write-up an...

CVE-2012-4681-Armoring

CVE-2012-4681-Armoring Overview A manual antivirus evasion armoring experiment for CVE-2012-4681 inspired by http://security-obscurity.blogspot.com/2012/11/java-exploit-code-obfuscation-and.html. Base Exploit: http://pastie.org/4594319 Results as of 9/26/2014 and 8/2/2016 Sample| Notes| 2014 Scor...

gmailc2

gmailc2 A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so...

gmailc2

gmailc2 Un servidor C2 completamente indetectable que se comunica a través de Google SMTP para evadir protecciones antivirus y restricciones de tráfico de red. Nota: Este RAT se comunica a través de Gmail SMTP o puedes usar cualquier otro SMTP también, pero Gmail SMTP es válido porque la mayoría ...

xencrypt

Xencrypt PowerShell crypter v 1.0 Authors Xentropy @SamuelAnttila SecForce @SECFORCELTD If you want to read about the design behind this tool and how to make your own crypter, there's an article I wrote about it here: Write a crypter in any language Note Don't be a script kiddie, I made this GPLv...

fudshell

fudshell An efficent Script To Generate FUD Persistent Reverse Shell For Red Teaming. Don't Upload Generated Stub On Virustotal Warning: Don't Upload Any Payload On VirusTotal. If it get detected then let me know... i will update the stub. If u need cobalt strike evasions then DM on Telegram:...

TheFatRat

TheFatRat 一个大规模漏洞利用工具 TheFatRat 是一款漏洞利用工具，它使用著名的载荷编译恶意软件，编译后的恶意软件可在 Linux、Windows、Mac 和 Android 上执行。TheFatRat 提供了一种简单的方法来创建后门和载荷，可以绕过大多数杀毒软件。 信息 此工具仅供教育目的，未经事先双方同意使用TheFatRat攻击目标是非法的。 开发者不承担任何责任，也不对因使用本程序造成的任何误用或损害负责。 功能特点！ 完全自动化 MSFvenom 和 Metasploit。 生成本地或远程监听器。 按操作系统类别轻松制作后门。 生成多种格式的载荷。...

CVE-2021-40444_builders

CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, research and educational purposes. You are responsible for how you use the code provided in this repo. The code is developed by reversing malware...

ZSC

OWASP ZSC THIS SOFTWARE WAS CREATED TO CHALLENGE ANTIVIRUS TECHNOLOGY, RESEARCH NEW ENCRYPTION METHODS, AND PROTECT SENSITIVE OPEN SOURCE FILES WHICH INCLUDE IMPORTANT DATA. CONTRIBUTORS AND OWASP FOUNDATION WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE. OWASP ZSC is open source software written ...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...