EvilBytecode

EByte-VBS-Obfuscator-Go

VBS-Obfuscator-GO is a Go-based tool designed for obfuscating VBScript (VBS) files. It transforms readable VBScript code into a less recognizable form by employing random variable names and encoding character values using mathematical operations. This helps protect scripts from casual inspection and modification.

EDR-XDR-AV-Killer

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

GoDefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

GoRedOps

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

Lifetime-Amsi-EtwPatch

Two in one, patch lifetime powershell console, no more etw and amsi!

Lifetime-AmsiBypass

Lifetime AMSI bypass.

PayloadCrypter

Go Based Crypter That Can Bypass Any Kinds Of Antivirus Products, payload crypter supports over 4 programming languages.

PyDefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package.

Shellcode-Loader

This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.

ThunderKitty

🔑 Open source stealer written in Go, all logs will be sent to Telegram bot.

EvilBytecode/GoRedOps

🦫 | GoRedOps is a repository dedicated to gathering and sharing advanced techniques and offensive malware for Red Team, with a specific focus on the Go programming language, all is made for educational purpoeses only.

EvilBytecode/GoDefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package. Windows ONLY.

EvilBytecode/EDR-XDR-AV-Killer

Reproducing Spyboy technique, which involves terminating all EDR/XDR/AVs processes by abusing the zam64.sys driver

EvilBytecode/ThunderKitty

🔑 Open source stealer written in Go, all logs will be sent to Telegram bot.

EvilBytecode/Shellcode-Loader

This is way to load a shellcode, and obfuscate it, so it avoids scantime detection.

EvilBytecode/PyDefender

Anti Virtulization, Anti Debugging, AntiVM, Anti Virtual Machine, Anti Debug, Anti Sandboxie, Anti Sandbox, VM Detect package.

EvilBytecode/EByte-VBS-Obfuscator-Go

VBS-Obfuscator-GO is a Go-based tool designed for obfuscating VBScript (VBS) files. It transforms readable VBScript code into a less recognizable form by employing random variable names and encoding character values using mathematical operations. This helps protect scripts from casual inspection and modification.

EvilBytecode/Evilbytecode-Anti-VM

Measures average CPU cycles for the CPUID instruction to detect if the code is running in a VM by comparing against a threshold.

EvilBytecode/ThunderKitty-Ransomware

Ransomware written in go, encrypt - decrypt.

EvilBytecode/Go-Assembly

Examples how to use a Assm (Assembly) in a go.

EvilBytecode/Nyx-Full-Dll-Unhook

(EDR) Dll Unhooking = kernel32.dll, kernelbase.dll, ntdll.dll, user32.dll, apphelp.dll, msvcrt.dll.

EvilBytecode/Evilbytecode-Shellcode-Go-Tactics

A mutliple tactics to execute shellcode in go :}

EvilBytecode/PS2BAT

A Documentation for my module PS2BAT, it converts Powershell Scripts to Batchfile ones.

EvilBytecode/Enable-All-Tokens

Enable-All-Tokens is a Go-based project designed to adjust and enable a list of specified privileges for the current process token on a Windows operating system. This project can be particularly useful for developers and system administrators who need to programmatically enable various system privileges for their applications.

EvilBytecode/GolangStyle

GolangStyle, best looking go library.

EvilBytecode/Ntdll-Unhook

Unhook Ntdll.dll, Go & C++.

EvilBytecode/GoEvilDocs

Malware development in Go, learn today, anti dynamic analysis & Static & sandboxes.

EvilBytecode/GetSyscallStubGo

GetSyscallStubCGo.

EvilBytecode/SsnRetrieval

Loads NTDLL, parses the PE file, extracts "Zw" functions, retrieves their System Service Numbers (SSNs), and prints each function’s name, SSN, and address.

EvilBytecode/EByte-Shellcode-Loader

shellcode loader that uses indirect syscalls written in D Lang The loader bypasses user-mode hooks by resolving system calls manually from NTDLL using a hash-based method.

EvilBytecode/Malwarebytes-Shutdowner

Kill malawarebytes process. Can be ported to any programming language.

EvilBytecode/RubyRedOps

💎 | RubyRedOps is a repository for advanced Red Team techniques and offensive malware, focused on Ruby

EvilBytecode/D-ntdll-unhook

a simple code to unhook ntdll lol.

EvilBytecode/Evilbytecode

EvilBytecode/Cpp-Red-Ops

C++ Red Opsec, im making this beacuse i want to learn more.

EvilBytecode/Keyauth-Protected-App-Go

Keyauth-Protected-App-Go is a Go-based application that integrates with the KeyAuth API to provide secure user authentication. It comes with built-in anti-debugging and anti-DLL injection features to protect against reverse engineering and unauthorized modifications.

EvilBytecode/veh-syscalls-shellcode

dm @codepulze1 on discord or codepulze on telegram to buy VEH syscalls, ssn resolving, 4/21. read readme.md

EvilBytecode/RoSint

Roblox osint, gets some info about user.

EvilBytecode/Learning-D

wsp just for me ? i guess lol.

EvilBytecode/RobloxCookieRefresher

Refresh Roblox Cookies, bypass ip locks, region locks.