Popular repositories

1. EDR-Preloader EDR-Preloader Public

   An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

   C++ 354 59

2. TrickBot-Toolkit TrickBot-Toolkit Public

   A collection of tools for dealing with TrickBot

   Python 196 42

3. EDRception EDRception Public

   A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.

   C++ 157 31

4. ZombifyProcess ZombifyProcess Public

   Inject code into a legitimate process

   C++ 141 57

5. TinyXPB TinyXPB Public

   Windows XP 32-Bit Bootkit

   C 138 76

6. AppContainerSandbox AppContainerSandbox Public

   An example sandbox using AppContainer (Windows 8+)

   C++ 129 48