ropfuscator
donut
| ropfuscator | donut | |
|---|---|---|
| 5 | 4 | |
| 398 | 3,245 | |
| -0.3% | - | |
| 3.2 | 0.0 | |
| 7 days ago | about 2 months ago | |
| C++ | C | |
| GNU General Public License v3.0 or later | BSD 3-clause "New" or "Revised" License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ropfuscator
-
Bypassing Windows Defender (10 Ways)
ropfuscator (sadly only for Linux at the moment)
- Show HN: ROPfuscator – ROP Obfuscator
- ROPfuscator: ROP Obfuscator
- Ropfuscator: ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
- GitHub - ropfuscator/ropfuscator: ROPfuscator is a fine-grained code obfuscation framework for C/C++ programs using ROP (return-oriented programming).
donut
-
Bypassing Windows Defender (10 Ways)
The Donut project by TheWover is a very effective Position-Independent shellcode generator from PEs/DLLs. Depending on the input file given, it works different ways. For this PoC I will be using Mimikatz, so let us see how it works at a high level. From a brief look at the code, this would be the main routine of the Donut.exe executable tool:
-
Cannot Load .NET assemblies in memory!
Note that I used the loader from donut and it worked as expected! What am I doing wrong here people?
-
BEST KALI TOOL TO MAKE UNDETECTABLE BACKDOOR 2022?
Donut -- tool to convert (certain, very simple, non-.NET) PE files into shellcode.
- Does anyone know any good x64 shellcode loaders?
What are some alternatives?
Hikari-LLVM15 - A fork of Hikari Obfuscator [WIP]
DripLoader - Evasive shellcode loader for bypassing event-based injection detection (PoC)
Alcatraz - x64 binary obfuscator
Shhhloader - Syscall Shellcode Loader (Work in Progress)
LLVM-Guide - LLVM (Low Level Virtual Machine) Guide. Learn all about the compiler infrastructure, which is designed for compile-time, link-time, run-time, and "idle-time" optimization of programs. Originally implemented for C/C++ , though, has a variety of front-ends, including Java, Python, etc.
vivanewvegas-wabbajack - A Wabbajack port of the Viva New Vegas modding guide.
obfy - A tiny C++ obfuscation framework
pe_to_shellcode - Converts PE into a shellcode
opencilk-project - Monorepo for the OpenCilk compiler. Forked from llvm/llvm-project and based on Tapir/LLVM.
ThreatCheck - Identifies the bytes that Microsoft Defender / AMSI Consumer flags on.
rp - rp++ is a fast C++ ROP gadget finder for PE/ELF/Mach-O x86/x64/ARM/ARM64 binaries.
obfuscator