Ch0pin/AVIator

Health v2 · maintenance only

Flags: no_releases archived

Adoption not part of the score

1161 stars · 230 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

AV|Ator is a GUI backdoor generator that encrypts shellcode with AES and produces Windows executables that decrypt and inject the payload using techniques like process and thread injection to bypass antivirus detection. It is a C#/.NET tool aimed at red-teamers and security researchers testing AV evasion.

Use cases

• generate encrypted shellcode executables that bypass antivirus
• test whether an AV product detects injected payloads
• encrypt meterpreter shellcode with AES and an IV
• spoof executable filenames with RTLO to look like pdf or txt files
• apply custom icons to generated payloads
• evaluate process injection techniques against EDR and AV on Windows

When to choose

• you are a red-teamer or pentester needing an AV evasion payload generator
• you want to test antivirus detection of process injection on Windows
• you need a quick GUI tool to wrap shellcode in an encrypted executable

When to avoid

• you need a stealthy production-grade C2 framework rather than a demo generator
• you require Linux or macOS payload targets
• you want a maintained tool with active development and support
• you lack authorization to test against protected systems

Facets

application · maturity maintenance

security cryptography penetration-testing security penetration-testing windows windows cross-platform av-evasion shellcode backdoor-generator process-injection crypter red-team offensive-security payload-encryption desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Ch0pin/AVIator")