https://github.com/yutianqaq/bypassav-1

通过分离的方式免杀火绒
https://github.com/yutianqaq/bypassav-1

bypass-antivirus cpp redteam redteam-tools

Last synced: 4 months ago
JSON representation

通过分离的方式免杀火绒

• Host: GitHub
• URL: https://github.com/yutianqaq/bypassav-1
• Owner: yutianqaq
• Created: 2023-11-29T13:27:40.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2023-12-15T13:31:34.000Z (over 2 years ago)
• Last Synced: 2025-10-11T02:12:53.126Z (10 months ago)
• Topics: bypass-antivirus, cpp, redteam, redteam-tools
• Language: C++
• Homepage:
• Size: 43.9 KB
• Stars: 12
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
> 免责声明：本工具仅用于安全研究和教学目的，用户应自行承担因使用该工具而引起的一切法律和相关责任。作者不对任何法律责任承担责任。

# BypassAV-1

通过分离的方式免杀火绒

读入 Msfvenom 或 Cobalt Strike 等 C2 的 Shellcode 方式分离免杀

或者配合 donut 可以将 exe、dll 转为 Shellcode 载入 MimiKatz 等工具

# 效果

![Preview](https://github.com/yutianqaq/BypassAV-1/blob/main/img1.png)