Popular repositories Loading

1. EDR-Preloader EDR-Preloader Public

   An EDR bypass that prevents EDRs from hooking or loading DLLs into our process by hijacking the AppVerifier layer

   C++ 458 74

2. TrickBot-Toolkit TrickBot-Toolkit Public

   A collection of tools for dealing with TrickBot

   Python 198 37

3. EDRception EDRception Public

   A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.

   C++ 173 33

4. ZombifyProcess ZombifyProcess Public

   Inject code into a legitimate process

   C++ 143 54

5. TinyXPB TinyXPB Public

   Windows XP 32-Bit Bootkit

   C 142 68

6. FakeMBR FakeMBR Public

   TDL4 style rootkit to spoof read/write requests to master boot record

   C++ 130 75