AVBypass

antivirus bypass protection requirements golang installed usage 1 - create your payload go run create.go e.g: go run create.go 1.1.1.1 443 SecRetkira https://www.youtube.com/watch?v=Rv4VzpGCEEM 2 - in output folder you will find shell.go compile it go build shell.go 3 - now you have exe file to...

Python-Rootkit

python-rootkit This is a full undetectable python RAT which can bypass almost all antivirus and open a backdoor inside any windows machine which will establish a reverse https Metasploit connection to your listening machine. ViRu5 life cycle Bypass all anti-virus. Inject a malicius powershell...

mcafee-sitelist-pwd-decryption

Python3 password decryption tool for the McAfee SiteList.xml file. Author: [email protected] Blog: http://funoverip.net Date: Feb 10 2016 References: https://funoverip.net/2016/02/mcafee-sitelist-xml-password-decryption/...

yetAnotherObfuscator

yetAnotherObfuscator A C obfuscator tool that can bypass Windows Defender antivirus. I made this tool mainly as an excuse to learn more about C and how obfuscators function. This is an alpha release, so expect some nice bugs. Usage: Drag drop the C exe into yetAnotherObfuscator.exe Or provide the...

chalumeau

Chalumeau Chalumeau is automated,extendable and customizable credential dumping tool based on powershell and python. Main Features Write your own Payloads In-Memory execution Extract Password List Dashboard reporting / Web Interface Parsing Mimikatz Dumping Tickets Screenshots Known Issues Parsin...

maldev-for-dummies

Malware Development for Dummies In the age of EDR, red team operators cannot get away with using pre-compiled payloads anymore. As such, malware development is becoming a vital skill for any operator. Getting started with maldev may seem daunting, but is actually very easy. This workshop will sho...

armadito-windows-driver

Armadito Windows Driver Armadito Windows Driver is responsible of on-access protection of Armadito antivirus. Copyright C Teclib', 2015, 2016 Project home : http://www.teclib-edition.com/teclib-products/armadito-antivirus See Online documentation at : http://armadito-av.readthedocs.io/en/latest/...

AV_Kernel_Vulns

AVKernelVulns Pocs for Antivirus Software‘s Kernel Vulnerabilities found by myself...

gmailc2

gmailc2 A Fully Undetectable C2 Server That Communicates Via Google SMTP to evade Antivirus Protections and Network Traffic Restrictions Note: This RAT communicates Via Gmail SMTP or u can use any other smtps as well but Gmail SMTP is valid because most of the companies block unknown traffic so...

ASWCrypter

Welcome to the ASWCrypter script v1.0 100% FUD An Bash&Python Script For Generating Payloads that Bypasses All Antivirus so far FUD ; . PLEASE DON'T UPLOAD BACKDOOT TO WWW.VIRUSTOTAL.COM 23/08/2018 Important This Version Just for test , In future I will update ASWCrypter to generate a payloads fo...

kwetza

Introduction By Chris Le Roy @brompwnie [email protected] Kwetza is a tool that allows you to infect an existing Android application with a Meterpreter payload. What does it do? Kwetza infects an existing Android application with either custom or default payload templates to avoid detection ...

ZSC

OWASP ZSC THIS SOFTWARE WAS CREATED TO CHALLENGE ANTIVIRUS TECHNOLOGY, RESEARCH NEW ENCRYPTION METHODS, AND PROTECT SENSITIVE OPEN SOURCE FILES WHICH INCLUDE IMPORTANT DATA. CONTRIBUTORS AND OWASP FOUNDATION WILL NOT BE RESPONSIBLE FOR ANY ILLEGAL USAGE. OWASP ZSC is open source software written ...

armadito-av

Armadito core Armadito is an open-source antivirus. This repository contains Armadito core library, daemon and service. Copyright C Teclib', 2015, 2016 Project home : http://www.teclib-edition.com/teclib-products/armadito-antivirus See Online documentation at :...

pe_to_shellcode

petoshellcode Converts PE so that it can be then injected just like a normal shellcode. At the same time, the output file remains to be a valid PE. Supports both 32 and 64 bit PEs Authors:@hasherezade & @hh86 Objective The goal of this project is to provide a possibility to generate PE files that...

fudshell

fudshell An efficent Script To Generate FUD Persistent Reverse Shell For Red Teaming. Don't Upload Generated Stub On Virustotal Warning: Don't Upload Any Payload On VirusTotal. If it get detected then let me know... i will update the stub. If u need cobalt strike evasions then DM on Telegram:...

CVE-2026-19195-PoC

CVE-2026-19195 - Proof of Concept Arbitrary Registry Key Modifications via Unauthenticated IOCTL requests in Jingyun Antivirus Kernel Driver ZyArk.sys Affected Asset Product: Jingyun Antivirus Version: 2.4.2.39 Component: ZyArk.sys SHA-256 Hash:...

avpass

AVPASS AVPASS is a tool for leaking the detection model of Android malware detection systems i.e., antivirus software, and bypassing their detection logics by using the leaked information coupled with APK obfuscation techniques. AVPASS is not limited to detection features used by detection system...

CVE-2026-19193-PoC

CVE-2026-19193 - Proof of Concept Arbitrary Process Termination via Unauthenticated Minifilter Message Handler in Jiangmin Antivirus Kernel Driver kvcore.sys Affected Asset: Product: Jiangmin Antivirus V21 Component: kvcore.sys Core Kernel Driver Version: 1.23.6.27 SHA-256 Hash:...

crypter

Crypter This Crypter is written in python 3, which can be used to obfusticate, encrypt the python source code to bypass AntiVirus. Also Capable to Bypass VM such as VirtualBox, VMware, Sandboxie. Uses AES-256 bit Encryption & Base64 Encoding to Encrypt the Source Code for Twice. 3 Powerfull Metho...

Chimera

Chimera is a shiny and very hack-ish PowerShell obfuscation script designed to bypass AMSI and antivirus solutions. It digests malicious PS1's known to trigger AV and uses string substitution and variable concatenation to evade common detection signatures. Chimera was created for this write-up an...