etw-bypass · GitHub Topics

Multilayered AV/EDR Evasion Framework

boaz code-injection obfuscation av-bypass av-edr-bypass av-evasion edr-bypass etw-bypass payload-generator pe-packer process-injection red-teaming red-teaming-tools red-ream antivirus-evasion

C++ 683

1 个月前

BlackSnufkin / NyxInvoke

NyxInvoke is a Rust CLI tool for running .NET assemblies, PowerShell, and BOFs with Patchless AMSI and ETW bypass features. with Dual-build support

amsi-bypass etw-bypass offensive-security red-team Rust

Rust 214

4 个月前

EvilBytecode / Lifetime-Amsi-EtwPatch

Two in one, patch lifetime powershell console, no more etw and amsi!

amsi-bypass amsi-evasion amsi-patch etw etw-bypass pentesting red-teaming fud

Go 92

2 个月前

wabzsy / gonut

Generator of https://github.com/TheWover/donut in pure Go. supports compression, AMSI/WLDP/ETW bypass, etc.

amsi-bypass donut etw-bypass Go Shell pe2shc pe2shellcode

Go 58

2 年前

Chainski / PandaLoader

A WIP shellcode loader tool which bypasses AV/EDR, coded in C++, and equipped with a minimal builder.

bypass-antivirus edr-bypass etw-bypass evasion Malware obfuscation pe-loader PowerShell Shell shellcode-loader persistence crypter payload-generator redteam

C++ 53

2 个月前

0xflux / ETW-Bypass-Rust

Event Tracing for Windows EDR bypass in Rust (usermode)

edr edr-bypass edr-evasion ethical-hacking ethical-hacking-tools etw etw-bypass Hacking Malware malware-research pentest pentest-tool pentesting red-team redteam redteam-tools redteaming Rust

Rust 23

1 年前

EvilBytecode / ETW-Patch

code snippet provided demonstrates how to patch the EtwEventWrite function in the ntdll.dll library on Windows using CGO (C Go).

av-evasion etw etw-bypass evasion fud

Go 9

2 个月前

Chainski / Lifetime-Amsi-EtwPatch

Loads a C# binary in memory within powershell profile, patching AMSI + ETW.

amsi-bypass amsi-evasion amsi-patch etw etw-bypass fud Nim pentesting-tools PowerShell red-teaming offensive-security

Nim 4

1 年前

Arcueld / ETW

Remove ETW providers from session &ETW session hijack

bypass etw etw-bypass

C++ 0

3 个月前

jackiepajo / nyx

#IOS#Nyx is a lightweight scripting language that prioritizes simplicity and ease of use. 🌟 With Nyx, you can quickly run scripts and explore creative coding possibilities. 🐙

amsi-bypass Common Lisp discord-api dotfiles Emacs etw-bypass 图像处理 iOS Nix Objective-C power-user Rust

C++ 0

5 天前