diff --git a/Offensive.md b/Offensive.md index d6f92b1..4d7bb9b 100644 --- a/Offensive.md +++ b/Offensive.md @@ -1837,6 +1837,10 @@ Some tools can be categorized in more than one category. But because the current Unknow101/FuckThatPacker A simple python packer to easily bypass Windows Defender + + VirtualAlllocEx/Payload-Download-Cradles + This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections. + VirtualAlllocEx/Shellcode-Downloader-CreateThread-Execution This POC gives you the possibility to compile a .exe to completely avoid statically detection by AV/EPP/EDR of your C2-shellcode and download and execute your C2-shellcode which is hosted on your (C2)-webserver.