A Rust-based tool for staged remote process injection via IPC orchestration in Windows. It bypasses EDR flagging and avoids noisy shellcode by separating the dormant stager (pipe server) from the e...

An editing interface and evasion tool featuring a collection of advanced obfuscation techniques to bypass AV/EDR detection of PowerShell scripts. Simply enter your payload and modify and create it ...

AMSI Bypass Generator v2026 is a PowerShell snippet generator for security testing, helping assess Defender and EDR detection behavior in controlled lab environments through configurable AMSI-focus...

claude-red is a curated library of offensive security skills designed for the Claude skills system. Each skill is a structured SKILL.md file that primes Claude with expert-level methodology for a s...

P3 (Process Parameter Poisoning) - Windows shellcode loader via CreateProcessW params + NtSetContextThread (EDR evasion research) - HackSpeak/p3-loader

edr bypass kit dz. Contribute to rootdz1337/edr-bypass-kit- development by creating an account on GitHub.

Turn a Microsoft-signed binary into a red team implant — no admin rights, no custom signing. ClickOnce delivery via AppDomainManager hijack with shellcode execution, file drop, reverse SSH + SOCKS5...

Adversary emulation toolkit — implants, payload generators, C2 infrastructure, phishing frameworks, disk imagers, kill switches, and assembly-level shellcode experiments. - cwill-telecom/Red-Cell

Windows绕过EDR实现DumpHash. Contribute to AabyssZG/HashDump-BypassEDR development by creating an account on GitHub.

Polymorphic shellcode encoder for authorized pentesting & CTF - darkLabz001/001

Offensive security techniques including AMSI bypass, EDR evasion, process hollowing, and shellcode loading - SlugRegister/offensive-maldev

This is a full, production-ready, cross-platform (Windows/Linux/macOS) framework. It does not ask for permissions. It does not ask for input., It uses AES-256-GCM for all traffic, and it generates...

Bare-metal cybersecurity & edge telemetry engine. Bypasses Python interpreter bottlenecks using native C-Bridges, SIMD bitwise vectorization, and cache-aligned memory blocks for sub-millise...

Contribute to adios255/awareness-edr-tamper-bypass development by creating an account on GitHub.

RustyWater represents the main payload and the backbone of the entire adversarial operation in Static Kitten group attacks. - S3N4T0R-0X0/RustyWater-ShellCode-Dropper

DFIR case: injected shellcode in powershell.exe. Contribute to Ivan-qa-rgb/powershell-shellcode-case development by creating an account on GitHub.

Automated tool for testing EDR responsiveness and bypass defenses for endpoint security hardening - compiler-gdb/EDR-Evasion

Suite de técnicas de evasión de shellcode — cifrado, encoding polimórfico y bypass de AV/EDR - mrflippermen/Shellcode-Evasion-Suite

Nim-based encryption tool for obfuscating shellcode and payloads for evading Windows Defender. - Chaelsoo/nimcrypt