ezEmu

ezEmu ezEmu 使用户能够通过各种执行技术测试对手行为。类似于一个“面向蓝队的进攻框架”，ezEmu 没有任何网络/C2能力，而是专注于创建本地测试遥测数据。 Windows 有关 ELF 内容，请参见 /Linux ezEmu 被编译为 parent.exe 以简化进程树，并将跟踪（并终止）子进程，以便在日志/仪表板中轻松搜索。 当前执行技术包括： Cmd.exe T1059.003 PowerShell T1059.001 非托管 PowerShell T1059.001 CreateProcess API T1106 WinExec API T1106 ShellExecu...

MAL-2026-3002 Malicious code in lyrox (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a758a1be229d0656a639cd9e76cb14b3224260a08da87b6de28ff2bc4c1d48ba Heavy obfuscate code for extracting further obfuscate binaries and executing them using file less techniques. Some versions contain the executable embedded,...

laZzzy - Shellcode Loader, Developed Using Different Open-Source Libraries, That Demonstrates Different Execution Techniques

laZzzy is a shellcode loader that demonstrates different execution techniques commonly employed by malware. laZzzy was developed using different open-source header-only libraries. Features Direct syscalls and native Nt functions not all functions but most Import Address Table IAT evasion Encrypte...

ezEmu - Simple Execution Of Commands For Defensive Tuning/Research

ezEmu enables users to test adversary behaviors via various execution techniques. Sort of like an "offensive framework for blue teamers ", ezEmu does not have any networking/C2 capabilities and rather focuses on creating local test telemetry. Windows See /Linux for ELF ezEmu is compiled as...