{"adoption": {"forks": 529, "observed_at": "2026-08-28T04:07:28.340575+00:00", "stars": 2890}, "canonical_url": "https://ross.abutalabs.com/products/scarecrow", "card": {"archived": true, "artifact_type": "cli-tool", "description": "ScareCrow - Payload creation framework designed around EDR bypass.", "domain": ["security", "penetration-testing", "developer-tools"], "enriched": true, "function": ["security", "penetration-testing"], "health_score": 10, "homepage": null, "language": "Go", "license": null, "license_family": "other", "maturity": "abandoned", "member_repos": ["optiv/ScareCrow"], "name": "optiv/ScareCrow", "platform": ["windows", "go", "cli"], "pushed_at": "2023-08-18T17:16:06+00:00", "repo": "optiv/ScareCrow", "stars": 2890, "tags": ["edr-bypass", "payload-generation", "evasion", "red-team", "shellcode-loader", "archived"], "topics": [], "urls": [], "use_cases": ["generate payloads that bypass EDR detection", "create sideloading loaders for legitimate Windows processes", "bypass application whitelisting controls", "unhook EDR hooks from system DLLs in memory", "test endpoint detection coverage with evasion techniques", "encrypt shellcode with multiple encryption methods"], "what_it_is": "ScareCrow is a Go-based payload creation framework designed to bypass EDR (Endpoint Detection and Response) and application whitelisting controls. It generates sideloading loaders for Windows that remove EDR hooks from system DLLs in memory using techniques like DLL unhooking and indirect syscalls.", "when_to_avoid": ["you want active development or support - this repository is archived and moved to Tylous/ScareCrow", "you need a defensive or detection tool rather than an offensive one", "you are not working on Windows targets", "you cannot accept the project having no license"], "when_to_choose": ["you are a red teamer or penetration tester testing EDR effectiveness", "you need to generate Windows loaders that sideload into legitimate processes", "you want to evaluate whether your EDR can detect DLL unhooking and indirect syscall techniques"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/scarecrow", "repo": "optiv/ScareCrow", "role": "main", "score": 10}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:07:28.340575+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-29T18:48:17.423241+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "32f5f7a383d08ef5038d06d14c32d42998b1da9f810a688d1435bb4447ad4c47", "fetched_at": "2026-08-28T04:07:28.340575+00:00", "kind": "readme", "missing": false, "url": "https://github.com/optiv/ScareCrow"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-03T02:39:23.370411+00:00", "flags": ["archived", "no_license"], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 2047, "days_push": 1111, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 10, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}