Antivirus evasion project

Pillager是一个适用于后渗透期间的信息收集工具

Tool to evade Antivirus With Different Techniques

Injecting shellcode into a process memory and executing it in C#

MappingInjection via csharp

JALSI - Just Another Lame Shellcode Injector

Load shellcode via syscall

Load a fresh new copy of ntdll.dll via file mapping to bypass API inline hook.

Bin smith

transmit cs beacon (shellcode) over self-made dns to avoid anti-kill and AV

Inject shellcode into process via "EarlyBird"

.NET Reverse Shell

get a meterpreter on windows 10 or windows 11

Windows Service with the implementation of the Process hollowing technique to run shellcode

This repository contains a tool that can encrypt all type of files and give the encrypted output in the form of an encrypted shellcode. Process of encrypting shellcode is very important for injection processes to bypass signature based detection by the security controls.

Dynamic and extensible shell code generator with multiple output types which can be formatted in binary, hexadecimal, and the typical shellcode output standard.

基于csharp实现的免杀shellcode加载器

This repository contains xor shellcode encryptor that is used to bypass static or signature based detection of malicious shellcodes for Process Injection exploits

A Simple ShellcodeLoader

Process hollowing C# shellcode runner that is FUD against Microsoft Defender as of October 7, 2023.