-
REF: https://bohops.com/2021/03/16/investigating-net-clr-usage-log-tampering-techniques-for-edr-evasion/
File Locations:
- :\Users\\AppData\Local\Microsoft\CLR__(arch)\UsageLogs
- :\Windows\\…
-
Not really an issue/bug, more a feature request. Alot of the Next-Gen AV technologies are catching meterpreter payloads and are becoming very hard to evade because they hook the windows API functions …
-
-
-
参考
- [x] https://github.com/Airboi/bypass-av-note
-
An error occurred while building the client. Although server was built successfully.
```
error[E0793]: reference to packed field is unaligned
--> C:\Users\user\.cargo\registry\src\github.com-1ecc…
-
about x86_prepend_bytes can you tell more ?
and about :
set tasks_max_size "1048576";
set tasks_proxy_max_size "921600";
[03/15 11:45:50] beacon> upload /home/kali/Desktop/okok/anydesk.exe …
-
please what's meaning of syscall in shellcode, purely study or other practical meaning?
ybdt updated
6 months ago
-
[link]
https://github.com/f1zm0/hades
[/link]
[tags]
shellcode, evasion, syscall
[/tags]
[short_descr]
Go shellcode loader that combines multiple evasion techniques
[/short_descr]
[lo…
-
[homepage] https://github.com/naksyn/Pyramid [/homepage]
[tags]Hacking,EDR,Python [/tags]
[short_descr]a tool to help operate in EDRs' blind spots [/short_descr]
[long_descr]Pyramid is a set of Pyt…