Top AI Repos — open-source AI, indexed and scored
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Top AI Repos tracks AI repositories on GitHub and answers two different questions about each one: is it moving right now, and would you bet a product on it.
Template-Driven AV/EDR Evasion Framework
| Date | Stars |
|---|---|
| 2026-07-24 | 1809 |
| 2026-07-25 | 1810 |
| 2026-07-28 | 1810 |
| 2026-07-30 | 1810 |
| 2026-08-06 | 1810 |
Today
— stars today
This week
— stars this week
This month
— stars this month
Momentum
0.0
growth rate 0.00%/day
:triangular_flag_on_post: This is the public repository of Inceptor, for latest version and updates please consider supporting us through https://porchetta.industries/ <h1 align="center"> <br> <img src=./images/inceptor-logo.png > <br> </h1> ## :triangular_flag_on_post: Sponsors If you want to sponsors this project and have the latest updates on Inceptor, latest issues fixed, latest features, please support us on https://porchetta.industries/ ## Official Discord Channel Come hang out on Discord! [](https://discord.gg/ycGXUxy) # Table of content * [Overview](#overview) * [Installation](#installation) * [Usage](#usage) ## News NW: We're currently working to improve the template engine! As soon as we release the next version, instructions on how to use, customize, and extend the tool, will be available in the [Wiki][13]. ## Overview Modern Penetration testing and Red Teaming often requires to bypass common AV/EDR appliances in order to execute code on a target. With time, defenses are becoming more complex and inherently more difficult to bypass consistently. Inceptor is a tool which can help to automate great part of this process, hopefully requiring no further effort. ## Features Inceptor is a template-based PE packer for Windows, designed to help penetration testers and red teamers to bypass common AV and EDR solutions. Inceptor has been designed with a focus on usability, and to allow extensive user customisation. To have a good overview of what it was implemented and why, it might be useful to tak a look to the following resources: * [The path to code execution in the era of EDR, Next-Gen AVs, and AMSI](https://klezvirus.github.io/RedTeaming/AV_Evasion/CodeExeNewDotNet/) * [Inceptor - Bypass AV-EDR solutions combining well known techniques](https://github.com/klezVirus/inceptor/blob/main/slides/Inceptor%20-%20Bypass%20AV-EDR%20solutions%20combining%20well%20known%20techniques.pdf) ### Shellcode Transformation/Loading Inceptor is able to convert existing EXE/DLL into shellcode using various open-source converters: * [Donut](https://github.com/TheWover/donut): Donut is "The Converter". This tool is more like a piece of art by [TheWover][3], and can be used to transform Native binaries, DLL, and .Net binaries into position independent code shellcode. * [sRDI](https://github.com/monoxgas/sRDI): By [Monoxgas][4], this tool can convert existing naticcve DLL into PIC, which can then be injected as regular shellcode. * [Pe2Sh](https://github.com/hasherezade/pe_to_shellcode): By [Hasherazade][5], this tool can convert an existing native EXE into PIC shellcode, which can also be run as a normal EXE. ### LI Encoders vs LD Encoders Inceptor can encode, compress, or encrypt shellcode using different means. While developing the tool, I started differentiating between what I call loader-independent (LI) encoding, and loader-dependent (LD) encoding. Loader-independent encoding is a type of encoding not managed by the template chosen by the user (loader). This usually means that the decoding stub is not part of the template, but embedded in the shellcode itself. Inceptor offers this kind of feature using the open-source tool [sgn](https://github.com/EgeBalci/sgn), which is used to make the payload polymorphic and undetectable using common signature detection. Even strong at it is, Shikata-Ga-Nai is not really suitable for certain templates. For this reason, Inceptor also implements Loader-dependent encoders, which are designed to let the loader taking care of the decoding. As such, LD encoders install the decoding stub directly in the template. This kind of encoders, as implemented within Inceptor, are also "Chainable", meaning they can be chained together to encode a payload. While using a chain of encoders can sometimes improve the obfuscation of a given payload, this technique can also expose
Excerpt of 10,675 characters
Read on GitHub
23
Would you bet a product on this? Bounded 0–100 and slow moving.
matched fp:e3092fe011cd85d5, topic:red-teaming, readme:red teaming, readme:red-teaming