样本分析报告

AV/EDR evasion via direct system calls.

Fileless attack with persistence

clearing traces of a loaded driver

PoC Rootkit targeting Linux-PAM

Process path modification x64

Execute cmd commands on victim machine through browser

Using Driver Global Injection dll, it can hide DLL modules

使用MFC编写的病毒技术合集

Changing values to bypass windows defender C#

A simple Linux rootkit written in C which can hide files inside it's directory.

Driver loader for bypassing Windows x64 Driver Signature Enforcement

Obfuscate specific windows apis with different apis

An Attempt to Bypass Memory Scanners By Misusing the ntdll.dll "RT" Section.

Hide Driver By MiProcessLoaderEntry

Kernel Driver Utility

This is a source to a bypass i made for some games, for now this should work f or VAC, BE and EAC. The only downside is that you will need to find a exploit to load the driver

usermode standalone kernel interface

(远程内存读写)LeechCore - Physical Memory Acquisition Library & The LeechAgent Remote Memory Acquisition Agent

User-space rootkit