freeide2017 Goto Github PK

amber

Reflective PE packer.

amsi-bypass-powershell

This repo contains some Amsi Bypass methods i found on different Blog Posts.

antivirus_r3_bypass_demo

分别用R3的0day与R0的0day来干掉杀毒软件

backstab

A tool to kill antimalware protected processes

black-angel-rootkit

Black Angel is a Windows 11/10 x64 kernel mode rootkit. Rootkit can be loaded with enabled DSE while maintaining its full functionality.

blacklotus

BlackLotus UEFI Windows Bootkit

blackout

kill anti-malware protected processes (BYOVD)

bluekeep

Proof of concept for CVE-2019-0708

botnet-browser-chrome

botnet browser chrome,mozilla firefox,capture card number any web site ,paypal,facebook,e-commerce ,get card number,expiration date, CVV , best keylogger javascript

btcrecover

An open source Bitcoin wallet password and seed recovery tool designed for the case where you already know most of your password/seed, but need assistance in trying different possible combinations.

callbackhell

Exploit for CVE-2021-40449 - Win32k Elevation of Privilege Vulnerability (LPE)

carboncopy

A tool which creates a spoofed certificate of any online website and signs an Executable for AV Evasion. Works for both Windows and Linux

chimera

Automated DLL Sideloading Tool With EDR Evasion Capabilities

clone-wars

100+ open-source clones of popular sites like Airbnb, Amazon, Instagram, Netflix, Tiktok, Spotify, Whatsapp, Youtube etc. See source code, demo links, tech stack, github stars.

covenant

Covenant is a collaborative .NET C2 framework for red teamers.

crackmapexec

A swiss army knife for pentesting networks

crackmapexecwin

CrackMapExec v5.1.0 compiled for Windows

cursedchrome

Chrome-extension implant that turns victim Chrome browsers into fully-functional HTTP proxies, allowing you to browse sites as your victims.

cve-2021-29337

CVE-2021-29337 - Privilege Escalation in MODAPI.sys (MSI Dragon Center)

cve-2021-33739-poc

cve-2022-1802

cve-2022-21894

baton drop (CVE-2022-21894): Secure Boot Security Feature Bypass Vulnerability

cve-2023-27470_exercise

cve-2023-28252

debugamsi

DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.

deepfacelive

Real-time face swap for PC streaming or video calls

deepfacelive-1

Real-time face swap for PC streaming or video calls

donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

donut-1

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

dropper

Project that generates Malicious Office Macro Enabled Dropper for DLL SideLoading and Embed it in Lnk file to bypass MOTW