Defeating Windows User Account Control

A repository of Windows Shellcode runners and supporting utilities. The applications load and execute Shellcode using various API calls or techniques.

Some demos to bypass EDRs or AVs by 78itsT3@m

Writing custom backdoor payloads with C# - Defcon 27 Workshop

Converts PE into a shellcode

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

ScareCrow - Payload creation framework designed around EDR bypass.

Open EDR public repository

Evade sysmon and windows event logging

x64 Dynamic Reverse Engineering Toolkit

This map lists the essential techniques to bypass anti-virus and EDR

A collection of techniques, examples and a little bit of theory for manually obfuscating PowerShell scripts to achieve AV evasion, compiled for educational purposes. The contents of this repository…

对 The Hacker Playbook 3 的翻译。

资料分享

Resources About Windows Security. 1100+ Open Source Tools. 3300+ Blog Post and Videos.