https://github.com/VirtualAlllocEx/Payload-Download-Cradles

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.
https://github.com/VirtualAlllocEx/Payload-Download-Cradles

antivirus-evasion bypass-antivirus bypass-edr edr-evasion payload

Last synced: 21 days ago
JSON representation

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections.

• Host: GitHub
• URL: https://github.com/VirtualAlllocEx/Payload-Download-Cradles
• Owner: VirtualAlllocEx
• Created: 2021-05-14T08:56:54.000Z (over 3 years ago)
• Default Branch: main
• Last Pushed: 2022-07-07T07:20:36.000Z (over 2 years ago)
• Last Synced: 2024-11-21T10:12:53.465Z (21 days ago)
• Topics: antivirus-evasion, bypass-antivirus, bypass-edr, edr-evasion, payload
• Language: PowerShell
• Homepage:
• Size: 47.9 KB
• Stars: 258
• Watchers: 3
• Forks: 51
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - VirtualAlllocEx/Payload-Download-Cradles - This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections. (PowerShell)

README

        
# Payload Download Cradles 

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass 

AV/EPP/EDR in context of download cradle detections. Notice, removing or obfuscating signatures from your download cradle is 

only one piece of the puzzle to bypass an AV/EPP/EDR. Depending on the respective product you have to modify your payload which 

should be downloaded by the cradle to bypass API-Hooking, Callbacks, AMSI etc. 

Creds to Daniel Bohannon for his amazing obfuscation tools, many thanks to Daniel.

https://github.com/danielbohannon/Invoke-Obfuscation

https://github.com/danielbohannon/Invoke-CradleCrafter

https://github.com/danielbohannon/Invoke-DOSfuscation