bloxstrap-persistance

Bloxstrap-Persistance modifies Bloxstrap's settings (Settings.json) to add persistent integrations, showcasing how applications can be exploited.

cmd-persistence

PoC, everytime you launch cmd, notepad does aswell (EXAMPLE PROCESS)

cpp-red-ops

C++ Red Opsec, im making this beacuse i want to learn more.

d-ntdll-unhook

a simple code to unhook ntdll lol.

ebyte-vbs-obfuscator-go

VBS-Obfuscator-GO is a Go-based tool designed for obfuscating VBScript (VBS) files. It transforms readable VBScript code into a less recognizable form by employing random variable names and encoding character values using mathematical operations. This helps protect scripts from casual inspection and modification.

edr-xdr-av-killer

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

enable-all-tokens

Enable-All-Tokens is a Go-based project designed to adjust and enable a list of specified privileges for the current process token on a Windows operating system. This project can be particularly useful for developers and system administrators who need to programmatically enable various system privileges for their applications.

etw-patch

code snippet provided demonstrates how to patch the EtwEventWrite function in the ntdll.dll library on Windows using CGO (C Go).

evil-go

A malicous Golang Package

evilbytecode

evilbytecode-anti-vm

Measures average CPU cycles for the CPUID instruction to detect if the code is running in a VM by comparing against a threshold.

evilbytecode-shellcode-go-tactics

A mutliple tactics to execute shellcode in go :}

getsyscallstubgo

GetSyscallStubCGo.

go-assembly

Examples how to use a Assm (Assembly) in a go.

godefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

goevildocs

Malware development in Go, learn today, anti dynamic analysis & Static & sandboxes.

golangstyle

GolangStyle, best looking go library.

goredops

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

keyauth-protected-app-go

Keyauth-Protected-App-Go is a Go-based application that integrates with the KeyAuth API to provide secure user authentication. It comes with built-in anti-debugging and anti-DLL injection features to protect against reverse engineering and unauthorized modifications.

keylogger

Go keylogger for Windows, logging keyboard input to a file using Windows API functions, and it is released under the Unlicense.

learning-d

wsp just for me ? i guess lol.

lifetime-amsi-etwpatch

Two in one, patch lifetime powershell console, no more etw and amsi!

lifetime-amsibypass

Lifetime AMSI bypass.

malwarebytes-shutdowner

Kill malawarebytes process. Can be ported to any programming language.

ntdll-unhook

Unhook Ntdll.dll, Go & C++.

nyx-full-dll-unhook

(EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.

payloadcrypter

Go Based Crypter That Can Bypass Any Kinds Of Antivirus Products, payload crypter supports over 4 programming languages.

powershell-persistance

Whenever PowerShell is launched, Notepad will also open. You can customize the script for educational purposes, but I emphasize that I do not take any responsibility for its use or any actions taken.

ppid-spoofing

Parent Process ID Spoofing, coded in CGo.

ps2bat

A Documentation for my module PS2BAT, it converts Powershell Scripts to Batchfile ones.