appcheck-ng.com/wp-content/uploads/unicode_normalization.html
May 10, 2022 at 5:06:25 PM UTC - permalink -

- https://appcheck-ng.com/wp-content/uploads/unicode_normalization.html

SQL injection: 9 ways to bypass Web Application Firewall • Penetration Testing
April 19, 2022 at 3:25:45 PM UTC - permalink -

- https://securityonline.info/sql-injection-9-ways-bypass-web-application-firewall/

Bypassing Cortex XDR | mr.d0x
April 13, 2022 at 10:49:46 PM UTC - permalink -

- https://mrd0x.com/cortex-xdr-analysis-and-bypass/

SomeStuff/Invoke-EDRCheck.ps1 at master · SadProcessor/SomeStuff
April 5, 2022 at 12:33:02 PM UTC - permalink -

- https://github.com/SadProcessor/SomeStuff/blob/master/Invoke-EDRCheck.ps1

Bypassing Cylance and other AVs/EDRs by Unhooking Windows APIs - Red Teaming Experiments
March 14, 2022 at 5:57:35 PM UTC * - permalink -

- https://www.ired.team/offensive-security/defense-evasion/bypassing-cylance-and-other-avs-edrs-by-unhooking-windows-apis

Antivirus evasion by user mode unhooking on Windows 10 - report.pdf
February 7, 2022 at 9:18:11 PM UTC - permalink -

- https://cdn.discordapp.com/attachments/633989923459956776/940267352157741076/report.pdf

code white | Blog: RCE in Citrix ShareFile Storage Zones Controller (CVE-2021-22941) – A Walk-Through
January 25, 2022 at 5:39:20 PM UTC - permalink -

- https://codewhitesec.blogspot.com/2021/09/citrix-sharefile-rce-cve-2021-22941.html

Yaxser/Backstab: A tool to kill antimalware protected processes
January 12, 2022 at 12:01:12 PM UTC - permalink -

- https://github.com/Yaxser/Backstab

wavestone-cdt/EDRSandblast
December 7, 2021 at 5:11:49 PM UTC - permalink -

- https://github.com/wavestone-cdt/EDRSandblast

maliceio/malice: VirusTotal Wanna Be - Now with 100% more Hipster
November 24, 2021 at 2:33:29 PM UTC - permalink -

- https://github.com/maliceio/malice

Evading EDR in 15 Minutes with ScareCrow
November 20, 2021 at 11:26:14 PM UTC - permalink -

- https://adamsvoboda.net/evading-edr-with-scarecrow/

Aetsu/OffensivePipeline: OffensivePipeline allows to download, compile (without Visual Studio) and obfuscate C# tools for Red Team exercises.
November 19, 2021 at 7:32:38 PM UTC - permalink -

- https://github.com/Aetsu/OffensivePipeline

burrowers/garble: Obfuscate Go builds
November 19, 2021 at 7:32:00 PM UTC - permalink -

- https://github.com/burrowers/garble

xforcered/InvisibilityCloak: Proof-of-concept obfuscation toolkit for C# post-exploitation tools
November 3, 2021 at 10:51:36 AM UTC - permalink -

- https://github.com/xforcered/InvisibilityCloak

Unicode/UTF-8-character table - starting from code position FF00
October 27, 2021 at 8:22:49 AM UTC - permalink -

- https://www.utf8-chartable.de/unicode-utf8-table.pl?start=65280&number=128

java.lang.Runtime.exec() Payload Workarounds - @Jackson_T
October 21, 2021 at 12:49:07 PM UTC * - permalink -

- https://ares-x.com/tools/runtime-exec/

Tylous/Limelighter: A tool for generating fake code signing certificates or signing real ones
October 20, 2021 at 11:08:43 AM UTC - permalink -

- https://github.com/Tylous/Limelighter

Evasion techniques
October 18, 2021 at 10:46:32 AM UTC - permalink -

- https://evasions.checkpoint.com/

exploits/exploit.php at master · mm0r1/exploits
October 7, 2021 at 2:27:16 PM UTC - permalink -

- https://github.com/mm0r1/exploits/blob/master/php-filter-bypass/exploit.php

Introducing Process Hiving & RunPE - Nettitude Labs
September 6, 2021 at 9:44:43 AM UTC - permalink -

- https://labs.nettitude.com/blog/introducing-process-hiving-runpe/