Bypass-Sandbox-Evasion
zeromemoryex/bypass-sandbox-evasionC++ tool that patches Windows API calls to bypass sandbox RAM size checks, enabling malware to evade detection in isolated analysis environments.
anti-botbinary-analysisids-ips-evasion+1
141
zeromemoryex/bypass-sandbox-evasionC++ tool that patches Windows API calls to bypass sandbox RAM size checks, enabling malware to evade detection in isolated analysis environments.
screetsec/thefatratThefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This…
cyb3rmx/qu1cksc0peAll-in-One malware analysis tool.
cryptax/droidlysisAutomated pre-analysis tool for Android apps that disassembles samples, extracts properties via configurable pattern matching, and organizes output…
pushpenderindia/crypterPython-based crypter that encrypts source code with AES-256 and Base64, evades VM detection via registry, process, and MAC checks, and executes…
xm0kht4r/ven0m-ransomwareFully undetectable and evasive ransomware written in Rust, leveraging a BYOVD technique to disable AV/EDR solutions on the infected systems.
nuclearphoenixx/fake-sandbox👁🗨 This script will simulate fake processes of analysis sandbox/VM software that some malware will try to avoid.
d4vinci/dr0p1t-frameworkA framework that create an advanced stealthy dropper that bypass most AVs and have a lot of tricks
bl4ckm1rror/fud-uuid-shellcodeC++ shellcode injection technique using XOR encryption and UUID string conversion to bypass Windows Defender, with function call obfuscation and…
machine1337/fudcryptPython-based crypter that obfuscates payloads to bypass antivirus and EDR, generating FUD stubs for red team operations.
kaandemir993/redline-stealer-c2-defender-bypass-payload-analysis"Reverse engineering analysis of RedLine Stealer, a .NET-based info-stealer that uses C2 domains (198.46.86.63, tempuri.org), Windows Defender…
kaandemir993/-remcos-rat-fileless-svchost-injection-obfuscated-payload-analysis-"Reverse engineering analysis of a fileless Remcos RAT variant that injects into svchost.exe via Native API calls. Covers obfuscated payload…
aaaddress1/skrullGenerates anti-copy malware launchers using Process Ghosting to bypass AV/EDR signature scanning and prevent automatic sample submission. Supports…
ishwardeepp/cve-2025-0411-motw-pocProof-of-concept and technical analysis of CVE-2025-0411, a 7-Zip Mark-of-the-Web bypass vulnerability exploited in SmokeLoader campaigns, with…
cyberforce/pesidiousMalware Mutation Using Reinforcement Learning and Generative Adversarial Networks
habibkaratas/sorry-ransomware-analysisSorry ransomware (.sorry) IOCs, YARA rules and forensic analysis - CVE-2026-41940 cPanel campaign
lief-project/liefCross-platform library to parse, modify, and abstract ELF, PE, and MachO executable formats. Supports C++, Python, and Rust APIs with disassembler,…
alexandreborges/malwoverviewMalwoverview is a first response tool for threat hunting across VirusTotal, Hybrid Analysis, URLHaus, Polyswarm, Malshare, Alien Vault, Malpedia,…