TelemetrySourcerer
mortar
Our great sponsors
| TelemetrySourcerer | mortar | |
|---|---|---|
| 1 | 3 | |
| 728 | 1,345 | |
| - | 5.2% | |
| 3.2 | 5.7 | |
| about 3 years ago | 4 months ago | |
| C++ | Pascal | |
| Apache License 2.0 | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
TelemetrySourcerer
mortar
- Mortar Loader: evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR) - Mortar Loader performs encryption and decryption of selected binary inside the memory streams and execute it directly with out writing any malicious indicator into the hard-drive
-
mortar: evasion technique to defeat and divert detection and prevention of security products (AV/EDR/XDR)
it is now fixed, it was an issue with the encryptor.https://github.com/0xsp-SRD/mortar/issues/1
What are some alternatives?
DripLoader - Evasive shellcode loader for bypassing event-based injection detection (PoC)
DefenderCheck - Identifies the bytes that Microsoft Defender flags on.
BLUESPAWN - An Active Defense and EDR software to empower Blue Teams
Veil - Veil 3.1.X (Check version info in Veil at runtime)
Forensia - Anti Forensics Tool For Red Teamers, Used For Erasing Footprints In The Post Exploitation Phase.
URL-obfuscator - Python Program to obfuscate URLs to make Phishing attacks more difficult to detect. Uses Active open redirect list and other URL obfuscation techniques.
adversarial-robustness-toolbox - Adversarial Robustness Toolbox (ART) - Python Library for Machine Learning Security - Evasion, Poisoning, Extraction, Inference - Red and Blue Teams
Payload-Download-Cradles - This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.