encdecshellcode

Shellcode-Encrypter-Decrypter シェルコードの暗号化と復号化を行うツールです。XOR暗号を使用してシェルコードを暗号化・復号化します。 インストール root@kitploit: git clone https://github.com/blacknbunny/Shellcode-Encrypter-Decrypter.git && cd Shellcode-Encrypter-Decrypter/ python encdecshellcode.py --help 使用例 root@kitploit: Encryption: python...

PhantomEvasion

팬텀 에베이전 3.0 Phantom-Evasion은 파이썬파이썬 및 파이썬3 모두 호환으로 작성된 안티바이러스 우회 도구로, 가장 일반적인 x86 msfvenom 페이로드로도 거의 완전히 탐지되지 않는 실행 파일을 생성할 수 있습니다. 다음 운영체제는 공식적으로 자동 설정을 지원합니다: 1. Kali Linux 2. Parrot Security 다음 운영체제는 자동 설정을 지원할 가능성이 높지만 metasploit-framework의 수동 설치가 필요합니다: 1. OSX Catalina에서 테스트됨 2. Ubuntu 3...

Chimera

Chimera Unlea$ed Описание инструмента Хотя подгрузка DLL DLL sideloading может использоваться в легитимных целях, таких как загрузка необходимых библиотек для работы программы, она также может применяться и в злонамеренных целях. Злоумышленники могут использовать подгрузку DLL для выполнения...

NovaLdr

NovaLdr ⚜️ NovaLdr — это Threadless Module Stomping, написанный на Rust, созданный как учебный проект во время исследования мира разработки вредоносного ПО. Он использует продвинутые техники, такие как косвенные системные вызовы и шифрование строк, для достижения своих функций. Этот проект не...

dvenom

🐍 Double Venom DVenom Double Venom DVenomは、シェルコード用の暗号化ラッパーとローダーを提供することで、レッドチームがAVをバイパスするのを支援するツールです。 🚀 機能 🛡️ いくつかの著名なアンチウイルスAVをバイパス可能。 🔒 RC4、AES256、XOR、ROTを含む複数の暗号化方式を提供。 🏗️ C、Rust、PowerShell、ASPX、VBAのソースコードを生成。 🔄 VirtualAlloc、Process Injection、NT Section Injection、Hollow Process...

mortar

Mortar Loader Техника уклонения red team для обхода и отвлечения систем обнаружения и предотвращения средств безопасности. Mortar Loader выполняет шифрование и дешифрование PE/Shellcode в потоках памяти и запускает его с использованием нескольких техник инжекции. Mortar способен обходить...

defcon27_csharp_workshop

This repository contains a collection of C code snippets and labs for writing custom backdoor payloads, as part of a workshop presented at Defcon 27. The code covers various topics, including Windows API calls, memory allocation, thread creation, and encryption. The code snippets are organized in...

Dvenom - Tool That Provides An Encryption Wrapper And Loader For Your Shellcode

Double Venom DVenom is a tool that helps red teamers bypass AVs by providing an encryption wrapper and loader for your shellcode. Capable of bypassing some well-known antivirus AVs. Offers multiple encryption methods including RC4, AES256, XOR, and ROT. Produces source code in C, Rust, PowerShell...

Chimera - Automated DLL Sideloading Tool With EDR Evasion Capabilities

While DLL sideloading can be used for legitimate purposes, such as loading necessary libraries for a program to function, it can also be used for malicious purposes. Attackers can use DLL sideloading to execute arbitrary code on a target system, often by exploiting vulnerabilities in legitimate...

Inceptor - Template-Driven AV/EDR Evasion Framework

Modern Penetration testing and Red Teaming often requires to bypass common AV/EDR appliances in order to execute code on a target. With time, defenses are becoming more complex and inherently more difficult to bypass consistently. Inceptor is a tool which can help to automate great part of this...

Microsoft Windows Defender Evasive Executable

This module allows you to generate a Windows EXE that evades against Microsoft Windows Defender. Multiple techniques such as shellcode encryption, source code obfuscation, Metasm, and anti-emulation are used to achieve this. For best results, please try to use payloads that use a more secure...

IDPS SandBox AntiVirus Stealth Killer: MorphAES

IDPS SandBox AntiVirus Stealth Killer MorphAES is the world’s first polymorphic shellcode/malware engine, with metamorphic properties and capability to bypass sandboxes, which makes it undetectable for an IDPS, it’s cross-platform as well and library-independent. Properties: Polymorphism AES...

linux/x86 /bin/sh ROL/ROR Encoded Shellcode

Custom shellcode encoder/decoder that switches between byte ROR and byte ROL 1. Update eRORoROL-encoder.py with your shellcode 2. Run eRORoROL-encoder.py 3. Copy output from eRORoROL-encoder.py and update eRORoROL-decoder.nasm 4. Run eRORoROLcompile.sh -----eRORoROL-encoder.py BEGIN CODE-----...