Popular repositories Loading

1. DEFCON-31-Syscalls-Workshop DEFCON-31-Syscalls-Workshop Public

   Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

   C 788 110

2. Payload-Download-Cradles Payload-Download-Cradles Public

   This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.

   PowerShell 259 60

3. Create-Thread-Shellcode-Fetcher Create-Thread-Shellcode-Fetcher Public

   This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and download and execute your C2-shellcode which is hosted on your (…

   C++ 259 50

4. Direct-Syscalls-vs-Indirect-Syscalls Direct-Syscalls-vs-Indirect-Syscalls Public

   The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls

   C 251 26

5. Direct-Syscalls-A-journey-from-high-to-low Direct-Syscalls-A-journey-from-high-to-low Public

   Start with shellcode execution using Windows APIs (high level), move on to native APIs (medium level) and finally to direct syscalls (low level).

   C 147 27

6. HWBP-DEP-Bypass HWBP-DEP-Bypass Public

   Educational proof-of-concept demonstrating DEP/NX bypass using hardware breakpoints, vectored exception handling, and instruction emulation on Windows x64. For security research and learning purpos…

   C 102 12