#Edr-evasion
Showing 14 of 14 repositories tagged #edr-evasion, ranked by stars
Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".
Python AV Evasion Tools
Threadless Process Injection through entry point hijacking
AppLocker-Based EDR Neutralization
pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory
Tool for working with Indirect System Calls in Cobalt Strike's Beacon Object Files (BOF) using SysWhispers3 for EDR evasion
A ring0 Loadable Kernel Module (Linux) for latest kernels 6.x
Rust malware EDR evasion via direct syscalls, fully implemented as an example in Rust
BadExclusionsNWBO is an evolution from BadExclusions to identify folder custom or undocumented exclusions on AV/EDR
EDR & AV Bypass Arsenal— a comprehensive collection of tools, patches, and techniques for evading modern EDR and antivirus defenses.
Nim process hollowing loader
Event Tracing for Windows EDR bypass in Rust (usermode)
Windows infostealer in Rust with polymorphic builds, Hell's Gate syscalls, and compile-time encryption. Educational use only.
APC Queue Injection EDR Evasion in Rust