chronoss3 Goto Github PK

iscsicpl_bypassuac

UAC bypass for x64 Windows 7 - 11

ivy

Ivy is a payload creation framework for the execution of arbitrary VBA (macro) source code directly in memory. Ivy’s loader does this by utilizing programmatical access in the VBA object environment to load, decrypt and execute shellcode.

jasmin-ransomware

Jasmin Ransomware is an advanced red team tool (WannaCry Clone) used for simulating real ransomware attacks. Jasmin helps security researchers to overcome the risk of external attacks.

jlaive

.NET Antivirus Evasion Tool (Exe2Bat)

joecrypter

Crypter thingy I made for avoiding automated anti-malware environments. This is to be used for EDUCATIONAL PURPOSES ONLY.

killer

Is a tool created to evade AVs and EDRs or security tools.

kittystager

KittyStager is a simple stage 0 C2. It is made of a web server to host the shellcode and an implant, called kitten. The purpose of this project is to be able to have a web server and some kitten and be able to use the with any shellcode.

kov.net-modded

lessmsi

A tool to view and extract the contents of an Windows Installer (.msi) file.

lightsout

Generate an obfuscated DLL that will disable AMSI & ETW

limba

compile-time control flow obfuscation using mba

limelighter

A tool for generating fake code signing certificates or signing real ones

lindrop

.desktop payload dropper generator

littlecorporal

LittleCorporal: A C# Automated Maldoc Generator

lunar

A lightweight native DLL mapping library that supports mapping directly from memory

malwaria

Execute Native DLL from .NET

masm_shc

A helper utility for creating shellcodes. Cleans MASM file generated by MSVC, gives refactoring hints.

mem64

Run Any Native PE file as a memory ONLY Payload , most likely as a shellcode using hta attack vector which interacts with Powershell.

memory-insertion-to-bypass-sandbox-antiviruses

c# based code to bypass every online scanner by a simple check of memory. It creates 1000MB memory using pointers and checks if it allocated go for malicious script otherwise "hello world".

merlin

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

mortar

evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)

mousedistance

Measure the distance the cursor have been moved to bypass sandboxes

net-obfuscate

Obfuscate ECMA CIL (.NET IL) assemblies to evade Windows Defender AMSI

netrenamer

Simple tool to obfuscate/rename .NET module's methods, fields, classes and more using AsmResolver.

nidhogg

Nidhogg is an all-in-one simple to use rootkit for red teams.

nimcrypt2

.NET, PE, & Raw Shellcode Packer/Loader Written in Nim

nimshellcodeloader

使用nim编写的shellcode加载器

niximports

A .NET malware loader, using API-Hashing to evade static analysis

nopyfy_ransomware

Open source Ransomware with advanced Features. It is also compatible with offline-Victim.

noteme

ELF packer/crypter that aims to create hardened and stealthy troyans