EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections (Kernel callbacks and …
PMAT-labs – Labs For Practical Malware Analysis And Triage
Read this carefully before proceeding. This repository contains live malware samples for use in the Practical Malware Analysis & Triage …
Jektor – A Windows User-Mode Shellcode Execution Tool That Demonstrates Various Techniques That Malware Uses
This utility focuses on shellcode injection techniques to demonstrate methods that malware may use to execute shellcode on a victim …
EXOCET – AV-evading, Undetectable, Payload Delivery Tool
EXOCET is superior to Metasploit’s “Evasive Payloads” modules as EXOCET uses AES-256 in GCM Mode (Galois/Counter Mode). Metasploit’s Evasion Payloads …
LittleCorporal – A C# Automated Maldoc Generator
LittleCorporal.exe C:\beacon.bin explorer.exe .____ …” name=”twitter:description”> LittleCorporal.exe C:\beacon.bin explorer.exe .____ …” name=”description”> LittleCorporal.exe C:\beacon.bin explorer.exe .____ …” property=”og:description”> LittleCorporal: A …
UnhookMe – An Universal Windows API Resolver And Unhooker Addressing Problem Of Invoking Unmonitored System Calls From Within Of Your Red Teams Malware
In the era of intrusive AVs and EDRs that introduce hot-patches to the running processes for their enhanced optics requirements, …