Awesome-Mirrors
/
my-infosec-awesome
mirror of https://github.com/pe3zx/my-infosec-awesome.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Add: netero1010/EDRSilencer to Defense Evasion section

This commit is contained in:
pe3zx 2024-01-10 20:54:26 +07:00
parent b0b0fb97a2
commit 1bfbff8013
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Offensive.md
View File

@ -1748,6 +1748,10 @@ Some tools can be categorized in more than one category. But because the current
<td><a href="https://github.com/netbiosX/AMSI-Provider">netbiosX/AMSI-Provider</a></td>
<td>A fake AMSI Provider which can be used for persistence.</td>
</tr>
<tr>
<td><a href="https://github.com/netero1010/EDRSilencer">netero1010/EDRSilencer</a></td>
<td>A tool uses Windows Filtering Platform (WFP) to block Endpoint Detection and Response (EDR) agents from reporting security events to the server.</td>
</tr>
<tr>
<td><a href="https://github.com/netero1010/TrustedPath-UACBypass-BOF">netero1010/TrustedPath-UACBypass-BOF</a></td>
<td>Cobalt Strike beacon object file implementation for trusted path UAC bypass. The target executable will be called without involving "cmd.exe" by using DCOM object.</td>