Airboi/bypass-av-note resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1093 stars · 174 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Chinese-language knowledge base of antivirus evasion (bypass AV) techniques, covering signature-based, behavior-based, and cloud detection with code examples for shellcode loaders, thread hijacking, and process injection. It is a curated note collection rather than a runnable tool.

Use cases

• learn how antivirus engines detect malware
• study shellcode loader techniques like CreateThread and thread hijacking
• understand process injection methods such as VirtualAllocEx and WriteProcessMemory
• research direct syscall techniques to bypass user-mode hooks
• prepare for red team engagements against EDR and antivirus
• find references for encrypting and obfuscating shellcode

When to choose

• you are studying offensive security or red team AV evasion concepts
• you want annotated C/C++ code samples of common loader and injection techniques
• you need a reference of which Windows APIs trigger AV behavioral detection

When to avoid

• you need a production-ready, maintained evasion tool or framework
• you want defensive detection rules rather than offensive techniques
• you need something cross-platform - the content is Windows-focused

Facets

learning-resource · maturity maintenance

security reverse-engineering penetration-testing security penetration-testing windows developer-tools windows cpp c av-evasion antivirus-bypass red-team shellcode-loader malware-development offensive-security notes process-injection

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Airboi/bypass-av-note")