A protective and Low Level Shellcode Loader that defeats modern EDR systems.

助力每一位RT队员，快速生成免杀木马

Skrull is a malware DRM, that prevents Automatic Sample Submission by AV/EDR and Signature Scanning from Kernel. It generates launchers that can run malware on the victim using the Process Ghosting technique. Also, launchers are totally anti-copy and naturally broken when got submitted.

An Ounce of Notorious Smartphones Antler Bullet. Penetrate iOS and Android

A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber

Huorong Internet Security vulnerabilities 火绒安全软件漏洞

PoC designed to evade userland-hooking anti-virus.

该项目为Shellocde加载器，详细介绍了我们如何绕过防病毒软件，以及该工具如何使用

Bypass国内主流杀软

A PERSISTENT FUD Backdoor ReverseShell coded in C for any Windows distro, that will make itself persistent on every BOOT and fire a decoy app in the foreground while connecting back to the attacker machine as a silent background process , spawning a POWERSHELL on the attacker machine.

ADR is a trojan that retrieves all information on the computer and all data stored in applications using chormuim. It recovers cookies, tokens, passwords and saved bank cards. This malware is undetectable by Windows Defender, Chrome, Virustotal (4/71).

Closes handles of a remote process in attempt to crash it

undetectable reverse shell that can bypass windows defender and other AVs, by resolving functions at runtime and string encoding/hashing.

Framework and Native Payload - Payload Generator | Crypter FUD AntiVirus Evasion

Framework and Native Payload - Payload Generator | Crypter FUD AntiVirus Evasion