reveng007/ReflectiveNtdll

A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber

语言：C · GitHub 星标：178 · Fork：23

话题：antivirus · bypass · bypass-antivirus · dropper · edr · evasion · fiber · implant

在 GitHub 上查看原仓库