Popular repositories Loading

1. EDR-Preloader EDR-Preloader Public

   An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

   C++ 541 81

2. EDRception EDRception Public

   A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.

   C++ 204 37

3. TrickBot-Toolkit TrickBot-Toolkit Public

   A collection of tools for dealing with TrickBot

   Python 203 39

4. ZombifyProcess ZombifyProcess Public

   Inject code into a legitimate process

   C++ 146 54

5. TinyXPB TinyXPB Public

   Windows XP 32-Bit Bootkit

   C 145 67

6. AppContainerSandbox AppContainerSandbox Public

   An example sandbox using AppContainer (Windows 8+)

   C++ 140 48