81 matches found
Python-Rootkit
python-rootkit This is a full undetectable python RAT which can bypass almost all antivirus and open a backdoor inside any windows machine which will establish a reverse https Metasploit connection to your listening machine. ViRu5 life cycle Bypass all anti-virus. Inject a malicius powershell...
CVE-2021-40444_builders
CVE-2021-40444 builders This repo contain builders of cab file, html file, and docx file for CVE-2021-40444 exploit. This repo is just for testing, research and educational purposes. You are responsible for how you use the code provided in this repo. The code is developed by reversing malware...
avcleaner
avcleaner C/C++ source obfuscator for antivirus bypass Blog posts The implementation is rather complex and this domain in software development is rarely documented in layman's terms. This is why there are blog posts which detail every design choice and go over the quirks of working with the LLVM...
CVE-2022-21907
CVE-2022-21907 - HTTP Protocol Stack Remote Code Execution Vulnerability ⚠️ For educational and authorized security research purposes only Original Exploit Authors Very grateful to the original PoC author NU11SECURITY and michelep Description: HTTP Protocol Stack Remote Code Execution...
CVE-2018-8639-EXP
CVE-2018-8639-EXP CVE-2018-8639 EXP Usage: CVE-2018-8639-EXP.exe command etc 1. 开源的样本大部分可能已经无法免杀,需要自行修改 2. 我认为基础核心代码的开源能够帮助想学习的人 3. 本人从github大佬项目中学到了很多 4. 若用本人项目去进行：HW演练/红蓝对抗/APT/黑产/恶意行为/违法行为/割韭菜，等行为，本人概不负责，也与本人无关 5. 本人已不参与大小HW活动的攻击方了，若溯源到timwhite id与本人无关...
crypter
Crypter This Crypter is written in python 3, which can be used to obfusticate, encrypt the python source code to bypass AntiVirus. Also Capable to Bypass VM such as VirtualBox, VMware, Sandboxie. Uses AES-256 bit Encryption & Base64 Encoding to Encrypt the Source Code for Twice. 3 Powerfull Metho...
mimikat_ssp
mimikatssp windows 密码抓取绕杀毒...
HERCULES
HERCULES HERCULES is a customizable payload generator that can bypass antivirus software. root@kitploit: VERSION 3.0.5 INSTALLATION SUPPORTED PLATFORMS:...
PowerSploit
This project is no longer supported PowerSploit is a collection of Microsoft PowerShell modules that can be used to aid penetration testers during all phases of an assessment. PowerSploit is comprised of the following modules and scripts: CodeExecution Execute code on a target machine...
Ransomware Groups Exploit Legit IT Tools to Bypass Antivirus
New research from Seqrite explains the 'dual-use dilemma,' where ransomware attackers repurpose legitimate IT tools like IOBit Unlocker…...
Zombie ZIP method can fool antivirus during the first scan
A researcher published “Zombie ZIP,” a simple way to change the first part header of a ZIP file so it falsely claims its contents are uncompressed while they are actually compressed. Many antivirus products trust that header and never properly decompress or inspect the real payload. In tests...
PT-2026-24181
Name of the Vulnerable Software and Affected Versions affected versions not specified Description Attackers are utilizing a technique involving malformed ZIP metadata, referred to as 'shadow archives', to circumvent antivirus AV and Endpoint Detection and Response EDR systems. This method allows...
ShellExploit
This project is no longer supported PowerSploit is a col...
EUVD-2012-1454
Malware in sbrugna...
EUVD-2016-4993
Malware in sbrugna...
EUVD-2012-0038
Malware in sbrugna...
EUVD-2012-1462
Malware in sbrugna...
EUVD-2006-0649
Malware in sbrugna...