#1Tools for bypassing Intrusion Detection and Prevention Systems (IDS/IPS) and network security controls.
Kitploit recommended

Embed a payload inside a PNG file
.NET assembly loader with patchless AMSI and ETW bypass

Next Generation Firewall Audit and Bypass Tool

Dynamic shellcode loader with sophisticated evasion capabilities

Automated Wi-Fi deauthentication tool that continuously scans for clients on a target SSID and kicks non-whitelisted devices. Features whitelist…

A shellcode function to encrypt a running process image when sleeping.


AppLocker-Based EDR Neutralization

AV/EDR processes termination by exploiting a vulnerable driver (BYOVD)

Remove API hooks from a Beacon process.

Quickjack is a point-and-click tool for intuitively producing advanced clickjacking and frame slicing attacks.

Lab4PurpleSec is a modular Purple Team homelab combining a vulnerable Active Directory environment (GOAD), a Docker-based web DMZ, pfSense +…

Bypass EDR Hooks by patching NT API stub, and resolving SSNs and syscall instructions at runtime

IDPS & SandBox & AntiVirus STEALTH KILLER. MorphAES is the world's first polymorphic shellcode engine, with metamorphic properties and capability to…

Load your driver like win32k.sys

Mutates signed Windows binaries to retain valid catalog signatures while changing file hashes, bypassing hash-based endpoint blocks and exposing…

Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle to ntdll ,…

SilentButDeadly is a network communication blocker specifically designed to neutralize EDR/AV software by preventing their cloud connectivity using…