Blinding EDR On Windows - Red Team Blog
September 6, 2021 at 9:44:26 AM UTC - permalink -

- https://synzack.github.io/Blinding-EDR-On-Windows/

Defense Evasion Series Part 1 AMSI Bypass | Dazzy Ddos
September 6, 2021 at 9:44:06 AM UTC - permalink -

- https://dazzyddos.github.io/posts/AMSI-Bypass/

Emkei's Fake Mailer
August 10, 2021 at 4:03:22 PM UTC - permalink -

- https://emkei.cz/

FireWalker: A New Approach to Generically Bypass User-Space EDR Hooking - MDSec
June 30, 2021 at 12:59:52 PM UTC - permalink -

- https://www.mdsec.co.uk/2020/08/firewalker-a-new-approach-to-generically-bypass-user-space-edr-hooking/

PE Parsing and Defeating AV/EDR API Hooks in C++ - SolomonSklash.io
June 30, 2021 at 12:30:28 PM UTC - permalink -

- https://www.solomonsklash.io/pe-parsing-defeating-hooking.html

AMSI Bypass Methods – Pentest Laboratories
May 25, 2021 at 9:32:17 AM UTC - permalink -

- https://pentestlaboratories.com/2021/05/17/amsi-bypass-methods/amp/

BitLocker Lockscreen bypass | secret club
February 3, 2021 at 1:59:43 PM UTC * - permalink -

- https://secret.club/2021/01/15/bitlocker-bypass.html

A tale of EDR bypass methods | S3cur3Th1sSh1t
February 2, 2021 at 12:58:33 PM UTC - permalink -

- https://s3cur3th1ssh1t.github.io/A-tale-of-EDR-bypass-methods/

Imperva WAF Bypass | TechAnarchy
January 21, 2021 at 10:49:56 AM UTC - permalink -

- https://techanarchy.net/blog/imperva-waf-bypass

proxycannon/proxycannon-ng: A private botnet using multiple cloud environments for pentesters and red teamers. - Built by the community during a hackathon at the WWHF 2018 security conference
November 28, 2020 at 1:13:26 PM UTC - permalink -

- https://github.com/proxycannon/proxycannon-ng

moohax/Proof-Pudding: Copy cat model for Proofpoint
November 24, 2020 at 11:27:06 AM UTC - permalink -

- https://github.com/moohax/Proof-Pudding

Bypassing LSA Protection (aka Protected Process Light) without Mimikatz on Windows 10 - RED CURSOR
November 20, 2020 at 12:41:31 AM UTC - permalink -

- https://www.redcursor.com.au/blog/bypassing-lsa-protection-aka-protected-process-light-without-mimikatz-on-windows-10

RythmStick/AMSITrigger: The Hunt for Malicious Strings
November 19, 2020 at 9:58:07 PM UTC - permalink -

- https://github.com/RythmStick/AMSITrigger

phra's blog ~ Technical posts about InfoSec
November 11, 2020 at 11:47:49 AM UTC - permalink -

- https://iwantmore.pizza/posts/PEzor.html

Process Herpaderping | herpaderping
October 28, 2020 at 4:10:40 PM UTC - permalink -

- https://jxy-s.github.io/herpaderping/

PowerPoint Presentation - eu-17-Liberman-Lost-In-Transaction-Process-Doppelganging.pdf
October 20, 2020 at 9:31:03 AM UTC - permalink -

- https://www.blackhat.com/docs/eu-17/materials/eu-17-Liberman-Lost-In-Transaction-Process-Doppelganging.pdf

kgretzky/evilginx2: Standalone man-in-the-middle attack framework used for phishing login credentials along with session cookies, allowing for the bypass of 2-factor authentication
October 19, 2020 at 9:57:40 AM UTC - permalink -

- https://github.com/kgretzky/evilginx2

drk1wi/Modlishka: Modlishka. Reverse Proxy.
October 19, 2020 at 9:57:09 AM UTC - permalink -

- https://github.com/drk1wi/Modlishka

hfiref0x/UACME: Defeating Windows User Account Control
October 13, 2020 at 12:28:55 PM UTC - permalink -

- https://github.com/hfiref0x/UACME

Abusing HTTP hop-by-hop request headers - nathandavison.com
October 12, 2020 at 1:20:57 PM UTC - permalink -

- https://nathandavison.com/blog/abusing-http-hop-by-hop-request-headers