PoC BYPASS EDR AND AV process injection via hollowing process
by Shy - Friday November 1, 2024 at 06:23 PM
#1
Code to myself a process injection with process hollowing technique and XOR decrypt in memory SHELLCODE to execute a process to BYPASS EDR(COMODO EDR) AND AV


Hidden Content
You must register or login to view this content.
Shellcode encode rotation XOR


Hidden Content
You must register or login to view this content.


Please use a VM to test it, be careful and dont upload to virus total THANK YOU
Ban reason: Multi-Accounting @OffensiveSecurity | http://raiddfzn73ir6iyxlf7nwytnujiflddog...an-Appeals if you feel this is incorrect. (Permanent)
Reply
#2
Alright well lets see what you got. What EDR's have you tested this on?
Reply
#3
curious to see execution dawg
Reply
#4
Thanks, What EDR's u tested this on?
Reply
#5
lets see whats inside this thread
Reply
#6
veamos su contenido
Reply
#7
edr is atricky game to not break your own code. hope its in rust
Reply
#8
Hope this works..
Reply
#9
wow lets check your method. i hope its cool
Reply
#10
hey man thanks for Sharing!!!
Ban reason: Compromised - Malware Logs (Permanent)
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  Most CVE Exploited + PoC [2017-2024] j3n1n 212 5,652 07-24-2026, 04:02 AM
Last Post: fifaman
  Free Spotify Premium for Any Account (Mobile and Desktop) KaBob 580 54,919 07-24-2026, 04:00 AM
Last Post: fifaman
  ❄️ How to create and verify CASHAPP accounts! Create from anywhere JUNE 2024☑️ Skdxb 222 9,124 07-13-2026, 06:05 PM
Last Post: sipp
  Free .edu Email via Maricopa College — No Enrollment, Just the Email spanko73 57 1,641 07-03-2026, 12:30 PM
Last Post: cookky1
  Instagram Mega Hack Pack: Updated and Improved ! killaTheGoat 553 17,260 03-27-2026, 10:07 AM
Last Post: alpro12345



 Users browsing this thread: