Payload Creation

ScareCrow

GitHub - optiv/ScareCrow: ScareCrow - Payload creation framework designed around EDR bypass.GitHub

Supernova

GitHub - nickvourd/Supernova: Real fucking shellcode encryptor & obfuscator toolGitHub

Cacustorch

Payload Generation with CACTUSTORCH - MDSecMDSec

GitHub - mdsecactivebreach/CACTUSTORCH: CACTUSTORCH: Payload Generation for Adversary SimulationsGitHub

Veil

GitHub - Veil-Framework/Veil: Veil 3.1.X (Check version info in Veil at runtime)GitHub

C syntax into syscall assembly and its corresponding shellcode

GitHub - nixpal/shellsilo: SHELLSILO is a cutting-edge tool that translates C syntax into syscall assembly and its corresponding shellcode. It streamlines the process of constructing and utilizing structures, assigning variables, and making system calls. With this tool, integrating strings into your shellcode and initializing Unicode strings has never been easier.GitHub

Interesting Books

Interesting Books

Disclaimer: As an Amazon Associate, I earn from qualifying purchases. This helps support this GitBook project at no extra cost to you.

• Evading EDR: The Definitive Guide to Defeating Endpoint Detection Systems The author uses his years of experience as a red team operator to investigate each of the most common sensor components, discussing their purpose, explaining their implementation, and showing the ways they collect various data points from the Microsoft operating system. In addition to covering the theory behind designing an effective EDR, each chapter also reveals documented evasion strategies for bypassing EDRs that red teamers can use in their engagements.