The Wayback Machine - https://web.archive.org/web/20220506185637/https://github.com/topics/av-evasion

#

av-evasion

Here are 31 public repositories matching this topic...

TryCatchHCF / Cloakify

CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection

security cryptography privacy cipher hacking steganography infosec pentesting pentest hacking-tool exfiltration red-team dlp data-exfiltration security-tools av-evasion pentest-tool stego hacking-tools pentest-tools

Updated Nov 24, 2020
Python

hlldz / SpookFlare

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

obfuscation loader bypass dropper antivirus-evasion av-evasion av-bypass antivirus-testing endpoint-bypass

Updated May 8, 2019
Python

inceptor

klezVirus / inceptor

Sponsor

Open

Compiler limit exceeded: Line cannot exceed 16777214 characters

3

bestrocker221 commented Apr 13, 2022

Describe the bug
dotnet executable

When compiling the cs files needed for the encoders, the CSC compiler complains and stops the process.

[-] Error: temp\tmpg84fw_q7.cs(26,16777214): error CS1034: Compiler limit exceeded: Line cannot exceed 16777214 characters

To Reproduce
This happens when passing a binary (in my case ~4MB) into inceptor.

Expected behavior
working

Read more

bug good first issue

bytecode77 / r77-rootkit

Open

detach / temporary disable / uninstall by editing rk's config

8

thisisthelongestusernameyouhaveeverseen commented Feb 8, 2022

As the rootkit checks it's config from registry every n seconds
add ability detach and prevent injecting an specified process using it's pid/process name-
by creating a key/value in it's configs
and also ability to temporary disabling and self uninstalling it using same way

Read more

enhancement good first issue

swagkarna / Defeat-Defender-V1.2

Powerful batch script to dismantle complete windows defender protection and even bypass tamper protection ..Disable Windows-Defender Permanently....Hack windows. POC

proof-of-concept malware hacking batch defender antivirus bypass payload dropper bypass-antivirus fud av-evasion undetectable disable-windows-defender hack-tool malware-dropper bypass-defender hackwindows

Updated May 1, 2022
Batchfile

Ch0pin / AVIator

Antivirus evasion project

windows backdoor virus injection trojan antivirus shellcode bypass backdoors crypter av-evasion backdooring antivirus-testing virus-total av-b

Updated May 6, 2022
C#

lengjibo / FourEye

AV Evasion Tool For Red Team Ops

shellcode antivirus-evasion av-evasion redteam bypassav

Updated Dec 8, 2021
C

bytecode77 / pe-union

Crypter, binder & downloader with native & .NET stub, evasive by design, user friendly UI

downloader obfuscation binder crypter av-evasion

Updated May 2, 2022
C#

GetRektBoy724 / SharpUnhooker

C# Based Universal API Unhooker

windows csharp dll pentesting windows-api red-team av-evasion

Updated Feb 18, 2022
C#

GetRektBoy724 / MeterPwrShell

Automated Tool That Generates The Perfect Meterpreter Powershell Payload

windows malware bypass metasploit-framework payload bypass-antivirus meterpreter one-liner fud metasploit av-evasion bypass-uac bypass-firewall stager amsi bypass-amsi

Updated Sep 24, 2021

GetRektBoy724 / BetterXencrypt

A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs.

windows powershell avs payload bypass-antivirus crypter fud av-evasion amsi

Updated Jun 13, 2021
PowerShell

loadenmb / tvasion

🎭 Anti virus evasion based on file signature change via AES encryption with Powershell and C# AV evasion templates which support executable and Powershell payloads with Windows executable, Powershell or batch output. Developed with Powershell on Linux for Windows targets :)

csharp powershell aes-encryption crypter antivirus-evasion av-evasion signature-change

Updated Sep 24, 2019
PowerShell

n1nj4sec / pymemimporter

import pyd or execute PE all from memory using only pure python code and some shellcode tricks

python pe32 in-memory shellcode av-evasion mimikatz pyd

Updated Mar 16, 2017
Python

GetRektBoy724 / TripleS

Extracting Syscall Stub, Modernized

windows csharp pentesting syscall av-evasion red-teaming

Updated Apr 2, 2022
C#

padovah4ck / RedSharp

Penetration Test / Read Team - C# tools repository

windows c-sharp reverse-shell bypass-antivirus meterpreter av-evasion penetration-test shellcode-injector

Updated Dec 23, 2021
C#

nayjones / inflate.py

Artificially inflate a given binary to exceed common EDR file size limits. Can be used to bypass common EDR.

antivirus bugbounty antivirus-evasion av-evasion av-bypass endpoint-security evasion-attack edr-bypass

Updated Apr 9, 2022
Python

1captainnemo1 / PersistentCReverseShell

A PERSISTENT FUD Backdoor ReverseShell coded in C for any Windows distro, that will make itself persistent on every BOOT and fire a decoy app in the foreground while connecting back to the attacker machine as a silent background process , spawning a POWERSHELL on the attacker machine.

persistence evasion reverseshell bypass-antivirus fud av-evasion av-bypass complete-fud persistent-on-boot

Updated May 28, 2019
C

Darkbyte

JoelGMSec / Darkbyte

Sponsor

Repository of tools used in my blog

tools hacking rat keylogger rdp wi-fi tunneling red-team av-evasion

Updated Oct 19, 2021
C

vxlabinfo / SignFinder

Tool for easy clean PE32 from AV signature

hacking av-evasion av-signature

Updated Jul 27, 2016
Python

1captainnemo1 / DLLREVERSESHELL

A CUSTOM CODED FUD DLL, CODED IN C , WHEN LOADED , VIA A DECOY WEB-DELIVERY MODULE( FIRING A DECOY PROGRAM), WILL GIVE A REVERSE SHELL (POWERSHELL) FROM THE VICTIM MACHINE TO THE ATTACKER CONSOLE , OVER LAN AND WAN.

reverse-shell trojan fud antivirus-evasion av-evasion malware-sample evade trojan-rat av-bypass backdoors-created trojan-malware backdoor-attacks antiviral-resistance custom-reverseshell c-reverseshell

Updated Jun 4, 2019
C

swagkarna / Chuvi-Botnet

Fud Persistent Windows Backdoor developed purely in python

python windows backdoor botnet reverse-shell malware trojan reverse bypass bypass-antivirus fud av-evasion undetectable hack-tool hack-windows

Updated Mar 1, 2021
Python

MineRootkit

AdvDebug / MineRootkit

PoC Windows Usermode Rootkit made in C# and C++, made to show you how to protect your process using hooking.

csharp cpp rootkit malware malware-analysis malware-research evasion av-evasion malware-protection

Updated Apr 3, 2022
C#

swagkarna / PuttyorMalware

Using bitsadmin to download our malware and to bypass defender

hack bypass hacking-tool fud av-evasion undetectable hack-windows windows-rat malware-dropper bypass-defender

Updated Apr 13, 2021
Visual Basic .NET

Enelg52 / Gofrette

Gofrette is a reverse shell payload developed in Golang that bypasses Windows defender and many others anti-virus.

golang reverse-shell av-evasion

Updated Mar 7, 2022
Go

chdav / TallGrass

An AV exclusion enumeration tool written in Python.

python cybersecurity enumeration windows-registry red-team av-evasion windows-defender

Updated Feb 17, 2022
Python

swagkarna / shell_gain-v1

reverse shell

python backdoor bypass reverseshell fud av-evasion reversetcp fullypersistent

Updated Apr 17, 2020
Python

redteam88 / KillDefenderBOF

Beacon Object File PoC implementation of KillDefender

beacon cobalt-strike av-evasion redteaming bof redteam aggressor-script cobaltstrike-cna cobaltstrike defense-evasion aggressorscript evade-av av-evade

Updated Feb 9, 2022
C

ANK1036Official / Satangle

Script which helps the creation of antivirus evading malware.

helper av-evasion

Updated Mar 25, 2017
Shell

Souhardya / IMProtector

Old 32 bit PE executable protector / crypter

windows malware malware-research crypter av-evasion av-bypass anti-debug

Updated Nov 29, 2021
C++

enascimento / gym-malware

This is a malware manipulation environment for OpenAI's gym

machine-learning ai tool malware post-exploitation evasion av-evasion

Updated Jul 31, 2017
Python

Improve this page

Add a description, image, and links to the av-evasion topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the av-evasion topic, visit your repo's landing page and select "manage topics."