Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
-
Updated
Jul 28, 2026 - C
#
av-evasion
Here are 112 public repositories matching this topic...
Template-Driven AV/EDR Evasion Framework
obfuscation pinvoke code-injection red-team payload-generator av-evasion av-bypass red-teaming process-injection amsi-bypass pe-packer dinvoke amsi-evasion edr-bypass av-edr-bypass
-
Updated
Nov 3, 2023 - Assembly
CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
security cryptography privacy cipher hacking steganography infosec pentesting pentest hacking-tool exfiltration red-team dlp data-exfiltration security-tools av-evasion pentest-tool stego hacking-tools pentest-tools
-
Updated
Nov 24, 2020 - Python
这款工具是一款功能强大的网络安全综合工具，旨在为安全从业者、红蓝对抗人员和网络安全爱好者提供全面的网络安全解决方案。它集成了多种实用功能，包括解密、分析、扫描、溯源等，为用户提供了便捷的操作界面和丰富的功能选择。This tool offers robust network security solutions for professionals and enthusiasts. With features like decryption, analysis, scanning, and traceability, it provides a user-friendly interface and diverse functionality.
security osint cybersecurity pentest decryption webshell red-team network-security information-gathering security-tools threat-intelligence av-evasion vulnerability-scanner blue-team memshell webshell-decryption
-
Updated
Oct 10, 2026 - Java
Antivirus evasion project
windows backdoor virus injection trojan antivirus shellcode bypass backdoors crypter av-evasion backdooring antivirus-testing virus-total av-b
-
Updated
Jan 19, 2025 - C#
Multilayered AV/EDR Evasion Framework (no longer actively maintained)
obfuscation code-injection antivirus-evasion payload-generator av-evasion av-bypass red-teaming process-injection boaz pe-packer edr-bypass av-edr-bypass red-teaming-tools etw-bypass red-ream
-
Updated
Mar 28, 2026 - C++
PoC Implementation of a fully dynamic call stack spoofer
-
Updated
Jul 20, 2024 - C++
Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
obfuscation loader bypass dropper antivirus-evasion av-evasion av-bypass antivirus-testing endpoint-bypass
-
Updated
May 8, 2019 - Python
AV Evasion Tool For Red Team Ops
-
Updated
Dec 8, 2021 - C
Crypter, binder & downloader with native & .NET stub, evasive by design, user friendly UI
-
Updated
Jun 28, 2025 - Assembly
AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64
-
Updated
Oct 5, 2026 - Python
AV/EDR killer leveraging vulnerable kernel drivers
-
Updated
Nov 28, 2023 - C++
C++ self-Injecting dropper based on various EDR evasion techniques.
-
Updated
Feb 11, 2024 - C
C# Based Universal API Unhooker
-
Updated
Feb 18, 2022 - C#
Materials for the workshop "Red Team Ops: Havoc 101"
-
Updated
Oct 6, 2024 - C#
Golang library for malware development
go golang development cryptography encryption malware infosec pentesting shellcode kali-linux red-team av-evasion maldev
-
Updated
Nov 20, 2024 - Go
indirect syscalls for AV/EDR evasion in Go assembly
go golang assembly malware-research evasion offensive-security red-team av-evasion red-teaming adversary-emulation edr-bypass edr-evasion
-
Updated
Jun 13, 2023 - Assembly
Go shellcode loader that combines multiple evasion techniques
golang pentesting syscalls evasion offensive-security av-evasion ntdll red-teaming adversary-emulation ntapi edr-evasion
-
Updated
Jun 21, 2023 - Go
An online AV evasion platform written in Springboot (Golang, Nim, C) supports embedded, local and remote loading of Shellocde methods.
golang online bypass bypass-antivirus antivirus-evasion av-evasion redteaming redteam av-bypass redteam-tools
-
Updated
May 5, 2024 - Go
The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls
shellcode-loader av-evasion av-bypass windows-int edr-bypass edr-evasion direct-syscalls indirect-syscalls
-
Updated
Jan 20, 2024 - C
Add this topic to your repo
To associate your repository with the av-evasion topic, visit your repo's landing page and select "manage topics."