#

edr-evasion

Here are 170 public repositories matching this topic...

BestEdrOfTheMarket

Xacone / BestEdrOfTheMarket

EDR Lab for Experimentation Purposes

kernel-driver edr kernel-development edr-testing defense-evasion edr-evasion

Updated Jun 10, 2026
C++

klezVirus / SilentMoonwalk

PoC Implementation of a fully dynamic call stack spoofer

thread-stack av-evasion edr-evasion stack-spoofing

Updated Jul 20, 2024
C++

DEFCON-31-Syscalls-Workshop

VirtualAlllocEx / DEFCON-31-Syscalls-Workshop

Contains all the material from the DEF CON 31 workshop "(In)direct Syscalls: A Journey from High to Low".

workshop shellcode syscalls malware-analysis malware-development shellcode-loader antivirus-evasion windows-internals edr-bypass edr-evasion antivirus-bypass malware-development-guide direct-syscalls indirect-syscalls

Updated May 23, 2025
C

JoasASantos / SysWhispers4

AV/EDR evasion via direct and indirect system calls Windows NT 3.1 through Windows 11 24H2 · x64 · x86 · WoW64 · ARM64

av-evasion edr-evasion syswhispers syswhispers4

Updated Mar 7, 2026
Python

Accenture / Codecepticon

.NET/PowerShell/VBA Offensive Security Obfuscator

obfuscation csharp powershell vba antivirus-evasion edr-evasion accenture-security

Updated Feb 1, 2024
C#

lepotekil / MsfMania

Python AV Evasion Tools

docker encoding modular obfuscation compression encryption cross-platform python3 pentesting post-exploitation polymorphism monolith pe-format red-teaming shellcode-injection edr-evasion crosscompiler

Updated Oct 14, 2025
Python

pard0p / CallstackSpoofingPOC

C++ self-Injecting dropper based on various EDR evasion techniques.

dropper av-evasion edr-evasion indirect-syscall

Updated Feb 11, 2024
C

f1zm0 / hades

Go shellcode loader that combines multiple evasion techniques

golang pentesting syscalls evasion offensive-security av-evasion ntdll red-teaming adversary-emulation ntapi edr-evasion

Updated Jun 21, 2023
Go

f1zm0 / acheron

indirect syscalls for AV/EDR evasion in Go assembly

go golang assembly malware-research evasion offensive-security red-team av-evasion red-teaming adversary-emulation edr-bypass edr-evasion

Updated Jun 13, 2023
Assembly

Kudaes / Unwinder

Call stack spoofing for Rust

rust hacking-tool edr-evasion

Updated Feb 7, 2025
Rust

Kudaes / EPI

Threadless Process Injection through entry point hijacking

windows rust hacking redteam edr-evasion

Updated Sep 10, 2024
Rust

zero2504 / EDR-GhostLocker

AppLocker-Based EDR Neutralization

malware malware-analysis malware-research applocker malware-development edr applocker-rule windowsinternals edr-bypass edr-evasion

Updated Dec 19, 2025
C

naksyn / PythonMemoryModule

pure-python implementation of MemoryModule technique to load dll and unmanaged exe entirely from memory

python hacking evasion memory-module memorymodule redteaming redteam runpe redteam-tools edr-evasion

Updated Jun 22, 2024
Python

redteamfortress / PhantomKiller

Another BYOVD process killer. works on all EDR's. fully signed.

redteaming edr edr-bypass edr-evasion byovd

Updated May 19, 2026
C++

Kudaes / Split

Apply a divide and conquer approach to bypass EDRs

windows rust fork edr-evasion

Updated Oct 19, 2023
Rust

Maldev-Academy / MaldevAcademyLdr.2

RunPE implementation with multiple evasive techniques (2)

mimikatz runpe edr-evasion

Updated Sep 25, 2025
C

VirtualAlllocEx / Payload-Download-Cradles

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.

payload bypass-antivirus antivirus-evasion bypass-edr edr-evasion

Updated Jul 7, 2022
PowerShell

VirtualAlllocEx / Direct-Syscalls-vs-Indirect-Syscalls

The following two code samples can be used to understand the difference between direct syscalls and indirect syscalls

shellcode-loader av-evasion av-bypass windows-int edr-bypass edr-evasion direct-syscalls indirect-syscalls

Updated Jan 20, 2024
C

naksyn / DojoLoader

Generic PE loader for fast prototyping evasion techniques

evasion pe-loader cobalt-strike red-teaming red-team-tools edr-evasion sleep-obfuscation

Updated Jul 2, 2024
C

V-i-x-x / kernel-callback-removal

kernel callback removal (Bypassing EDR Detections)

kernel edr edr-bypass edr-evasion

Updated Jul 2, 2026
C++

Add this topic to your repo

To associate your repository with the edr-evasion topic, visit your repo's landing page and select "manage topics."