- https://github.com/S3cur3Th1sSh1t/Amsi-Bypass-Powershell
- https://amsi.fail/ <—- Automatic generation of some AMSI Bypass
- https://blog.sevagas.com/IMG/pdf/BypassAVDynamics.pdf
- https://ppn.snovvcrash.rocks/red-team/malware-development/code-injection/shellcode-runners
- https://samsclass.info/126/126_F21.shtml <— Practical Malware Analysis Course!
- https://www.ringzerolabs.com/2019/08/fast-and-free-malware-analysis-lab-setup.html
- https://epi052.gitlab.io/notes-to-self/blog/2021-06-16-windows-usermode-exploit-development-review/
- https://github.com/m0n0ph1/Process-Hollowing
- https://www.virusbulletin.com/virusbulletin/2011/10/okay-so-you-are-win32-emulator
- https://www.usenix.org/system/files/conference/woot16/woot16-paper-blackthorne_update.pdf
- https://blog.sannemaasakkers.com/2021/08/07/adversary-phishing-characteristics/
- https://s3cur3th1ssh1t.github.io/A-tale-of-EDR-bypass-methods/
- https://roberreigada.github.io/posts/playing_with_an_edr/
- https://github.com/jthuraisamy/SysWhispers
- https://raw.githubusercontent.com/Mr-Un1k0d3r/EDRs/main/cortex.txt <—– NON documented API’s, possible AV/EDR Bypass?
- https://0xpat.github.io/Malware_development_part_1/ <—- Malware Devlopment series
- https://github.com/BC-SECURITY/Beginners-Guide-to-Obfuscation
- https://www.shogunlab.com/blog/2017/08/11/zdzg-windows-exploit-0.html
- https://n4r1b.netlify.app/posts/2020/01/dissecting-the-windows-defender-driver-wdfilter-part-1/
- https://www.forrest-orr.net/post/malicious-memory-artifacts-part-i-dll-hollowing
- https://www.ired.team/offensive-security/code-injection-process-injection/apc-queue-code-injection <— APC Bypass
- https://pinvoke.net/ <—— Documented APIs for Bypass
- https://antiscan.me/
- https://github.com/stephenfewer/ReflectiveDLLInjection –> ReflectiveDLLInjection en Powershell!!!!
- https://github.com/PowerShellMafia/PowerSploit/blob/master/CodeExecution/Invoke-ReflectivePEInjection.ps1 –> Invoke-ReflectivePEInjection Powershell
- https://blogs.msdn.microsoft.com/joelpob/2004/02/15/creating-delegate-types-via-reflection-emit/
- https://web.archive.org/web/20120520182849/http://www.exploit-monday.com/2012_05_13_archive.html
Ceso Adventures