Implant drop-in for EDR testing

Windows user-land hooks manipulation tool.

Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"

Reduce Dynamic Analysis Detection Rates With Built-In Unhooker, Anti Analysis Techniques, And String Obfuscator Modules.

Unhook DLL via cleaning the DLL 's .text section

AV (BitDefender) function un-hook in C

Full IAT unhooking of all ntdll functions called from kernel32

Bypassing all EDR hooks while maintaining the cleanest callstack of all time with proxy calls and an exception handler.

This project demonstrates simply a ssdt unhooking technique via NtLoadDriver routine in Windows 11 X64.

Modular malware development library in Go - shellcode injection, defense evasion (AMSI/ETW/unhook), process herpaderping, C2 transport, syscall bypass, MITRE ATT&CK mapped