
SandboxBootkit
Bootkit for Windows Sandbox to disable DSE/PatchGuard.
binary-exploitationdefensive-toolsexploitation+5
349

Bootkit for Windows Sandbox to disable DSE/PatchGuard.

Discover DYLD_INSERT_LIBRARIES hijacks on macOS

Python antivirus evasion tool

Packs C# assemblies, PE files, or shellcode into encrypted Nim binaries with advanced evasion features including AMSI/ETW bypass, sandbox detection,…

Bash-based Linux persistence detection tool for DFIR investigations. Scans 15+ persistence mechanisms (systemd, cron, kernel modules, SSH,…