PoC BYPASS EDR AND AV process injection via hollowing process
by Shy - Friday November 1, 2024 at 06:23 PM
#1
Code to myself a process injection with process hollowing technique and XOR decrypt in memory SHELLCODE to execute a process to BYPASS EDR(COMODO EDR) AND AV


Hidden Content
You must register or login to view this content.
Shellcode encode rotation XOR


Hidden Content
You must register or login to view this content.


Please use a VM to test it, be careful and dont upload to virus total THANK YOU
Ban reason: Multi-Accounting @OffensiveSecurity | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
#2
Alright well lets see what you got. What EDR's have you tested this on?
Reply
#3
curious to see execution dawg
Reply
#4
Thanks, What EDR's u tested this on?
Reply
#5
lets see whats inside this thread
Reply
#6
veamos su contenido
Reply
#7
edr is atricky game to not break your own code. hope its in rust
Reply
#8
Hope this works..
Reply
#9
wow lets check your method. i hope its cool
Reply
#10
hey man thanks for Sharing!!!
Ban reason: Compromised - Malware Logs (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [FREE] eLearnSecurity - eCPTVx2 and eNDP reports Tamarisk 224 15,246 08-30-2026, 09:24 AM
Last Post: 4zteq
  Free .edu Email via Maricopa College — No Enrollment, Just the Email spanko73 59 2,803 08-27-2026, 12:59 AM
Last Post: angapusi1
  [FREE] SANS SEC595 Applied Data Science and Machine Learning - complete course Tamarisk 538 38,059 08-16-2026, 04:05 AM
Last Post: PreferencesY
  Free Spotify Premium for Any Account (Mobile and Desktop) KaBob 581 58,273 08-04-2026, 12:06 PM
Last Post: magicaloNe
  Most CVE Exploited + PoC [2017-2024] j3n1n 212 7,364 07-24-2026, 04:02 AM
Last Post: fifaman



 Users browsing this thread: 1 Guest(s)