Darkarmour
Darkarmour is an open-source Windows antivirus evasion framework that enables security professionals to bypass antivirus detection through customizable obfuscation and anti-analysis techniques.
Darkarmour is an open-source Windows antivirus evasion framework that enables security professionals to bypass antivirus detection through customizable obfuscation and anti-analysis techniques.
Checked October 2026.
Darkarmour is a Windows antivirus evasion framework designed to bypass detection by antivirus software during security testing and research activities.
The tool provides a customizable platform for creating and testing various evasion techniques against popular antivirus products. It includes multiple features for avoiding detection including code obfuscation capabilities, anti-debugging mechanisms, and anti-forensic techniques.
The framework allows security professionals to develop and implement custom evasion methods, enabling comprehensive testing of antivirus software effectiveness. Users can modify and extend the tool's functionality to suit specific testing requirements.
Darkarmour is distributed as an open-source project under the MIT license, making it freely available for modification and distribution within the cybersecurity community. The tool is hosted on GitHub, providing accessibility to penetration testers and security researchers.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about Darkarmour: features, pricing and alternatives.
Darkarmour is a product in the Red-Team & Adversary Emulation category. It covers Security Research, Obfuscation and Open Source.
Darkarmour is free. Download and setup instructions are at https://github.com/bats3c/darkarmour/.
Alternatives to Darkarmour listed on CybersecTools:
Compare all Darkarmour alternatives at https://cybersectools.com/alternatives/darkarmour
Darkarmour is available as on-premises software. It is listed for mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
CrackMapExec (CME) - A tool for querying internal database for host and credential information in cybersecurity.
Red/purple team and identity security assessment service simulating real adversary attacks
CrossC2 is a cross-platform payload generator that extends CobaltStrike's capabilities to Linux and macOS environments for red team operations.
A demonstration of a method to delete a locked executable or currently running file from disk.
A managed code hooking template for .NET assemblies, enabling API hooking, code injection, and runtime manipulation.
DET (extensible) Data Exfiltration Toolkit is a proof of concept tool for performing Data Exfiltration using multiple channels simultaneously.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI
