Fileless ring 3 rootkit with installer and persistence that hides processes, files, network connections, etc.
-
Updated
Jul 28, 2026 - C
#
av-evasion
Here are 115 public repositories matching this topic...
Template-Driven AV/EDR Evasion Framework
obfuscation pinvoke code-injection red-team payload-generator av-evasion av-bypass red-teaming process-injection amsi-bypass pe-packer dinvoke amsi-evasion edr-bypass av-edr-bypass
-
Updated
Nov 3, 2023 - Assembly
CloakifyFactory - Data Exfiltration & Infiltration In Plain Sight; Convert any filetype into list of everyday strings, using Text-Based Steganography; Evade DLP/MLS Devices, Defeat Data Whitelisting Controls, Social Engineering of Analysts, Evade AV Detection
security cryptography privacy cipher hacking steganography infosec pentesting pentest hacking-tool exfiltration red-team dlp data-exfiltration security-tools av-evasion pentest-tool stego hacking-tools pentest-tools
-
Updated
Nov 24, 2020 - Python
Antivirus evasion project
windows backdoor virus injection trojan antivirus shellcode bypass backdoors crypter av-evasion backdooring antivirus-testing virus-total av-b
-
Updated
Jan 19, 2025 - C#
Multilayered AV/EDR Evasion Framework (no longer actively maintained)
obfuscation code-injection antivirus-evasion payload-generator av-evasion av-bypass red-teaming process-injection boaz pe-packer edr-bypass av-edr-bypass red-teaming-tools etw-bypass red-ream
-
Updated
Mar 28, 2026 - C++
PoC Implementation of a fully dynamic call stack spoofer
-
Updated
Jul 20, 2024 - C++
Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
obfuscation loader bypass dropper antivirus-evasion av-evasion av-bypass antivirus-testing endpoint-bypass
-
Updated
May 8, 2019 - Python
AV Evasion Tool For Red Team Ops
-
Updated
Dec 8, 2021 - C
Crypter, binder & downloader with native & .NET stub, evasive by design, user friendly UI
-
Updated
Jun 28, 2025 - Assembly
AV/EDR killer leveraging vulnerable kernel drivers
-
Updated
Nov 28, 2023 - C++
C++ self-Injecting dropper based on various EDR evasion techniques.
-
Updated
Feb 11, 2024 - C
C# Based Universal API Unhooker
-
Updated
Feb 18, 2022 - C#
Golang library for malware development
go golang development cryptography encryption malware infosec pentesting shellcode kali-linux red-team av-evasion maldev
-
Updated
Nov 20, 2024 - Go
Materials for the workshop "Red Team Ops: Havoc 101"
-
Updated
Oct 6, 2024 - C#
indirect syscalls for AV/EDR evasion in Go assembly
go golang assembly malware-research evasion offensive-security red-team av-evasion red-teaming adversary-emulation edr-bypass edr-evasion
-
Updated
Jun 13, 2023 - Assembly
Go shellcode loader that combines multiple evasion techniques
golang pentesting syscalls evasion offensive-security av-evasion ntdll red-teaming adversary-emulation ntapi edr-evasion
-
Updated
Jun 21, 2023 - Go
An online AV evasion platform written in Springboot (Golang, Nim, C) supports embedded, local and remote loading of Shellocde methods.
golang online bypass bypass-antivirus antivirus-evasion av-evasion redteaming redteam av-bypass redteam-tools
-
Updated
May 5, 2024 - Go
The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls
shellcode-loader av-evasion av-bypass windows-int edr-bypass edr-evasion direct-syscalls indirect-syscalls
-
Updated
Jan 20, 2024 - C
Automated Tool That Generates The Perfect Meterpreter Powershell Payload
windows malware bypass metasploit-framework payload bypass-antivirus meterpreter one-liner fud metasploit av-evasion bypass-uac bypass-firewall stager amsi bypass-amsi
-
Updated
Sep 24, 2021
A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs.
-
Updated
Jun 13, 2021 - PowerShell
Add this topic to your repo
To associate your repository with the av-evasion topic, visit your repo's landing page and select "manage topics."