CVE-2024-42919

Consola de gestión eScan Título del Exploit : Consola de gestión eScan - Control de Acceso Incorrecto Autor : Jeyabalaji Versiones afectadas : 14.0.1400.2281 Probado en : Windows 11 CVE : CVE-2024-42919 Descripción: La consola de gestión Escan implementa mecanismos de autenticación; sin embargo, ...

AsmLdr

AsmLdr: Un cargador de shellcode dinámico para Windows x64 Descripción general AsmLdr es un cargador de shellcode avanzado implementado en lenguaje ensamblador x64, diseñado para entornos Windows x64. Su propósito principal es ejecutar payloads cifrados mientras minimiza la detección por parte de...

mcreator

mcreator Generador de Reverse Shell Codificados con Técnicas para Bypass AV's Instalación root@kitploit: git clone https://github.com/blacknbunny/mcreator.git && cd mcreator/ && python mcreator.py Versión python 2.7. no puede ser inferior ni superior a 2.7 debido a la sintaxis """ en los scripts...

GhostDriver

GhostDriver 👻 Acerca de GhostDriver es una herramienta de eliminación de AV construida en Rust que utiliza BYOVD. Cómo empezar 1. Instala Rust desde rust-lang.org 2. Clona: git clone https://github.com/BlackSnufkin/GhostDriver.git 3. Compila: cargo build --release --target=x8664-pc-windows-msvc 4...

Cloakify

CloakifyFactory CloakifyFactory & el Cloakify Toolset - Exfiltración e Infiltración de Datos a Plena Vista; Evasión de Dispositivos DLP/MLS; Ingeniería Social de Analistas; Derrotar Controles de Lista Blanca de Datos; Evasión de Detección de AV. Esteganografía basada en texto usando listas...

foolav

foolav El ejecutable compilado con este código es útil durante pruebas de penetración donde se necesita ejecutar algún payload ¿meterpreter quizás? mientras se está seguro de que no será detectado por el software antivirus. El único requisito es poder cargar dos archivos: ejecutable binario y...

thorse

THorse THorse es un generador de RAT troyano de administración remota para sistemas Windows/Linux escrito en Python 3. root@kitploit: Este pequeño script de Python puede hacer un trabajo realmente increíble. Descargo de responsabilidad :computer: Este proyecto fue creado solo con fines legítimos ...

Anti_suspend

Antisuspend Just an example of using shellcode to secure a process. Prevents: 1Freezing process threads you can use anti-attach for debugger 2Hardware breakpoints 3Hide thread from the debugger Problem: Use code in non legit modules This will raise the flags of AV...

Payload-Download-Cradles

Payload Download Cradles This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections. Notice, removing or obfuscating signatures from your download cradle is only one piece of the...

Interceptor

Interceptor Author: @Cerbersec Interceptor is a kernel driver focused on tampering with EDR/AV solutions in kernel space by patching kernel callbacks and hooking IRPs. Interceptor was made as part of an internship at NVISO Security's Red Team. The associated blogposts can be found here kernel...

CobaltWhispers

CobaltWhispers Author: @Cerbersec CobaltWhispers is an aggressor script that utilizes a collection of Beacon Object Files for Cobalt Strike to perform process injection, persistence and more, leveraging direct syscalls to bypass EDR/AV. CobaltWhispers is powered by SysWhispers2 and InlineWhispers...

TimeException

Disclaimer This tool is provided for educational purposes only. Any actions and activities related to the material contained within this repository are solely your responsibility. Misusing this tool can result in criminal charges against the persons in question. The author will not be held...

NewPowerDNS

NewPowerDNS NewPowerDNS is an updated version of @domchell's PowerDNS. The main feature added is support for transferring files using DNS A records. See below for a complete list of the modifications made: Support for transfer over DNS A records Gzip compression to reduce file transfer size Suppo...

OffensiveCpp

OffensiveCpp Offensive C++ is a collection of offensive security snippets written in C++. It includes various tools for penetration testing and exploit development. Table of Contents OffensiveCpp Introduction Why C/C++? Compiling Reference Libraries Contributing License Introduction The purpose o...

NimBlackout

NimBlackout Nota : Este proyecto es solo con fines educativos. El uso de este código para cualquier actividad maliciosa está estrictamente prohibido. No soy responsable de ningún uso indebido de este software. NimBlackout es una adaptación del proyecto @Blackout originalmente desarrollado en C++...

Voidgate

VOIDGATE Description: A technique that can be used to bypass AV/EDR memory scanners. This can be used to hide well-known and detected shellcodes such as msfvenom by performing on-the-fly decryption of individual encrypted assembly instructions, thus rendering memory scanners useless for that...

rusty_drivers

RustyDrivers This project is a BYOVD collection with the focus on killing EDR / AV processes. Currently the following drivers are supported: Blocked means that the driver is in the block list of Microsoft and cannot be executed on an up to date Windows. Build root@kitploit: cargo build --release...

Dr0p1t-Framework

Not maintained currently Wait for the next version Dr0p1t-Framework Have you ever heard about trojan droppers ? In short dropper is type of malware that downloads other malwares and Dr0p1t gives you the chance to create a stealthy dropper that bypass most AVs and have a lot of tricks Trust me :D ...

RefleXXion

Introduction RefleXXion is a utility designed to aid in bypassing user-mode hooks utilised by AV/EPP/EDR etc. In order to bypass the user-mode hooks, it first collects the syscall numbers of the NtOpenFile, NtCreateSection, NtOpenSection and NtMapViewOfSection found in the LdrpThunkSignature arra...

FunctionStomping

FunctionStomping Description This is a brand-new technique for shellcode injection to evade AVs and EDRs. This technique is inspired by Module Stomping and has some similarities. As to this date 23-01-2022 alsohollows-hunter doesn't find it. The biggest advantage of this technique is that it isn'...