An advanced Command-and-Control software designed for authorized Red Team Operations
ZAIUX® Framework, recently updated to version 2.0, comes with a vast set of out-of-the-box evasive techniques, leaving the operators only the duty to perform the offensive operations in a safe and under-the-radar environment.
Key Features
ZAIUX® Framework is an advanced software that stands out for some main features:
LoadLibrary Proxy
LoadLibrary is proxied through legitimate Windows APIs and memory regions, in order to keep a clean stack whenever a new library is loaded.
Choose between two different Sleep Obfuscation techniques
Prevent Memory Scanners from identifying the payload in memory during sleep cycles.
Inline .NET, EXE and Coff Execution
Run .NET, COFF and EXE inside the memory of the current process, bypassing detection by avoiding any kind of fork n’ run operation.
Thread Stack Spoofing and Return Address Spoofing
Spoof the thread stack before going to sleep, without calling Sleep or NtDelayExecution.
Patchless AMSI & ETW Evasion
AMSI and ETW Bypass are carried out through stelth techniques, avoiding any Byte-Patching in ntdll.dll or amsi.dll.
HTTPS, SMB and DNS over HTTPS Communication
In addition to the default HTTPS protocol, the Implant is capable to leverage SMB and DNS over HTTPS for stealth communication.
Automatically free the Shellcode’s memory region
Release the operator from the need to free the memory region initially allocated for the shellcode.
Automatically unhook User-Land Callbacks
Prevent some EDR products from tracing Syscalls and loaded modules by disabling callbacks monitoring routines.
Indirect Syscalls + Dynamic SSN Resolution on-the-fly
Change the return address of the Syscall instruction in ntdll.dll memory region and automatically resolve Syscalls’ System Service Numbers.
Other Technical Specs
- Token Impersonation
- Multiple Shellcode Injection techniques
- Situational Awareness built-in features
- File-Transfer capabilities
- Provided Implant types: Shellcode, DLL, EXE (Fully written in C and Assembly)
- Malleable Profiles
- Designed for Red-Teams (Multi-Player)
- More…
Having trouble using it?
Unsure about how to use it, the purchasing model, or other technical aspects? Our comprehensive FAQ has the answers you need.
Find out more about ZAIUX® Framework
Do you want more information about ZAIUX® Framework or licenses?
Fill out the form, we will reply as soon as possible.