antispy

AntiSpy English | 简体中文 A powerful anti rootkit toolkit AntiSpy is a free but powerful anti virus and rootkits toolkit. It offers you the ability with the highest privileges that can detect,analyze and restore various kernel modifications and hooks. With its assistance,you can easily spot and...

Anti-Virus-Evading-Payloads

🚩 Anti-Virus-Evading-Payloads !CAUTION...

mcreator

mcreator Encoded Reverse Shell Generator With Techniques To Bypass AV's Installation root@kitploit: git clone https://github.com/blacknbunny/mcreator.git && cd mcreator/ && python mcreator.py Version python 2.7. can't be lower or higher than 2.7 cause of the """ syntax in scripts. Runnig mcreator...

bluffy

Bluffy 셸코드를 ✨ 다양한 ✨ 형식으로 변환하세요! Bluffy는 셸코드를 실제처럼 보이는 데이터 형식으로 포맷팅하여 안티바이러스 제품을 정적으로 우회하는 실험에 사용된 유틸리티입니다. 0xBoku의 NinjaUUIDRunner와 ChoiSG의 UuidShellcodeExec 같은 개념 증명 도구들이 Bluffy의 초기 아이디어에 영감을 주었습니다. 현재까지 구현된 기능: 1. UUID 2. CLSID 3. SVG 4. CSS 5. CSV 도움말 root@kitploit: $ python3 bluffy.py -h...

BypassAV

BypassAV このマップは、アンチウイルスとEDRをバイパスするための必須テクニックを列挙しています。 注意: IOSsによりアンチウイルスに疑われる可能性が高いオープンソースツールを使用するのではなく、手動テクニックに関する記事を読むことを強くお勧めします。 プレビュー Markdown / HTML版の編集 Bypass-AV.md は MarkMap で作成されています。 ここでプレビューできます。 いくつかのプラグインで編集/プレビューできます: VSCode VSCode Marketplace - gera2ld.markmap-vscode Open VSX -...

Shellcode-Encryptor

셸코드 암호화기 바이러스 백신을 우회하기 위한 간단한 셸 코드 암호화/복호화/실행기입니다. 참고: 워크플로우를 완전히 재구성했습니다. 파워셸을 사용하여 메모리에 바이너리를 주입하는 것이 가장 효과적인 방법임을 발견했습니다. 목적 .Net 바이너리를 생성하여 base64로 인코딩되고 AES로 암호화된 셸코드를 포함하며, Windows 대상에서 실행되어 바이러스 백신을 우회합니다. 사용 방법 meterpreterencryptor.py를 사용하여 암호화된 base64 셸코드를 생성합니다: root@kitploit: root@kali...

Veil-Evasion

Veil-Evasion Veil-Evasion은 일반적인 안티바이러스 솔루션을 우회하는 metasploit 페이로드를 생성하도록 설계된 도구입니다. 참고: ./setup/setup.sh는 주요 버전 업데이트 시마다 다시 실행해야 합니다. Veil-Evasion 실행 중 주요 오류가 발생하면, 먼저 이 스크립트를 다시 실행하여 추가 패키지를 설치하고 공통 설정 파일을 업데이트하십시오. Veil-Evasion은 현재 @ChrisTruncer, @TheMightyShiv, @HarmJ0y가 적극적으로 지원하고 있습니다. 감사합니다:...

Veil

Veil Veil Logo Veil은 일반적인 안티바이러스 솔루션을 우회하는 metasploit 페이로드를 생성하도록 설계된 도구입니다. Veil은 현재 @ChrisTruncer가 지원하고 있습니다. 소프트웨어 요구사항: 다음 OS가 공식적으로 지원됩니다. Debian 8+ Kali Linux Rolling 2018.1+ 다음 OS에서 Veil을 실행할 수 있을 가능성이 높습니다: Arch Linux Manjaro Linux BlackArch Linux Deepin 15+ Elementary Fedora 22+ Linux Mi...

metasploitavevasion

Metasploit AV Evasion Metasploit payload generator that avoids most Anti-Virus products. Released as open source by NCC Group Plc - http://www.nccgroup.com/ Developed by Daniel Compton, daniel dot compton at nccgroup dot com https://github.com/nccgroup/metasploitavevasion Released under AGPL see...

CVE-2026-92253

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...

CVE-2026-92252

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files x86\Watchdog...

EUVD-2026-83741

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...

CVE-2026-92253 Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...

CVE-2026-92253

WatchDog Anti-Virus 1.8.640 on Windows is affected by an improper link resolution vulnerability in its quarantine restoration process . A local, low-privileged attacker can create a directory junction at the original path of a quarantined file and, by persuading an administrator to restore that f...

CVE-2026-92253 Arbitrary File Write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration

Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written to an arbitrary filesystem location by creating a directory junction at the original file pa...

CVE-2026-92252 Incorrect Default Permissions in WatchDog Anti-Virus Installation Directory

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files x86\Watchdog...

CVE-2026-92252

CVE-2026-92252 affects WatchDog Anti-Virus on Windows , where the installer incorrectly grants the Users group Full Control over C:\Program Files (x86)\Watchdog Anti-Virus. This allows local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files. The practi...

EUVD-2026-83740

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files x86\Watchdog...

CVE-2026-92252 Incorrect Default Permissions in WatchDog Anti-Virus Installation Directory

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files x86\Watchdog...

CVE-2026-92252: Incorrect Default Permissions

Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files, because the installer grants the Users group Full Control over C:\Program Files x86\Watchdog...