Killer: tool created to evade AVs and EDRs or security tools

[itsMe]

It’s an AV/EDR Evasion tool created to bypass security tools for learning, until now the tool is FUD.

Features:

    Module Stomping for Memory scanning evasion
    DLL Unhooking by fresh ntdll copy
    IAT Hiding and Obfuscation & API Unhooking
    ETW Patching for bypassing some security controls
    Included sandbox evasion techniques & Basic Anti-Debugging
    Fully obfuscated (Functions – Keys – Shellcode) by XOR-ing
    Shellcode reversed and Encrypted
    Moving payload into hallowed memory without using APIs
    Runs without creating new thread & Suppoers x64 and x86 arch

To see this hidden content, you must like this content.