bloxstrap-persistance

Bloxstrap-Persistance modifies Bloxstrap's settings (Settings.json) to add persistent integrations, showcasing how applications can be exploited.

cmd-persistence

PoC, everytime you launch cmd, notepad does aswell (EXAMPLE PROCESS)

cpp-red-ops

C++ Red Opsec, im making this beacuse i want to learn more.

d-ntdll-unhook

a simple code to unhook ntdll lol.

edr-xdr-av-killer

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

enable-all-tokens

Enable-All-Tokens is a Go-based project designed to adjust and enable a list of specified privileges for the current process token on a Windows operating system. This project can be particularly useful for developers and system administrators who need to programmatically enable various system privileges for their applications.

etw-patch

code snippet provided demonstrates how to patch the EtwEventWrite function in the ntdll.dll library on Windows using CGO (C Go).

evil-go

A malicous Golang Package

evilbytecode

evilbytecode-anti-vm

Measures average CPU cycles for the CPUID instruction to detect if the code is running in a VM by comparing against a threshold.

evilbytecode-shellcode-go-tactics

A mutliple tactics to execute shellcode in go :}

go-assembly

Examples how to use a Assm (Assembly) in a go.

godefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

goevildocs

Malware development in Go, learn today, anti dynamic analysis & Static & sandboxes.

golangstyle

GolangStyle, best looking go library.

goredops

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

keylogger

Go keylogger for Windows, logging keyboard input to a file using Windows API functions, and it is released under the Unlicense.

learning-d

wsp just for me ? i guess lol.

lifetime-amsi-etwpatch

Two in one, patch lifetime powershell console, no more etw and amsi!

lifetime-amsibypass

Lifetime AMSI bypass.

malwarebytes-shutdowner

Kill malawarebytes process. Can be ported to any programming language.

ntdll-unhook

Unhook Ntdll.dll, Go & C++.

nyx-full-dll-unhook

(EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.

payloadcrypter

Go Based Crypter That Can Bypass Any Kinds Of Antivirus Products, payload crypter supports over 4 programming languages.

powershell-persistance

Whenever PowerShell is launched, Notepad will also open. You can customize the script for educational purposes, but I emphasize that I do not take any responsibility for its use or any actions taken.

ppid-spoofing

Parent Process ID Spoofing, coded in CGo.

ps2bat

A Documentation for my module PS2BAT, it converts Powershell Scripts to Batchfile ones.

pydefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package.

rubyredops

💎 | RubyRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Ruby

shellcode-loader

This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.