A single byte modification in the kernel memory bypasses and disables all core functions of the AV/EDR security solutions
☆18Aug 26, 2025Updated last year
Alternatives and similar repositories for EDR-bypass-disable-PspNotifyEnableMask
Users that are interested in EDR-bypass-disable-PspNotifyEnableMask are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- EDR/AV Simulation for Malware Development☆12Oct 21, 2023Updated 3 years ago
- Misc Windows Driver/Kernel PoCs that do not need a separate repo.☆14May 4, 2025Updated last year
- Direct syscalls Injection to bypass AV/EDR☆10May 18, 2024Updated 2 years ago
- A template programming library for Kernel Mode Windows drivers.☆13Jul 12, 2016Updated 10 years ago
- Bypass Userland EDR hooks by Loading Reflective Ntdll in memory from a remote server based on Windows ReleaseID to avoid opening a handle…☆15Jan 7, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Simple single file header for creating zero imports drivers. Can be useful for bypassing forensic memory analysis performed by anticheats…☆26Sep 25, 2026Updated last month
- NTAPI hook bypass with (semi) legit stack trace☆18May 9, 2023Updated 3 years ago
- An advanced DKOM for drivers with "DRIVER_OBJECT"☆23Feb 19, 2023Updated 3 years ago
- Reversed WintaPix Malware Source code | That targets countries in the Middle East and abuse KeServiceDescriptorTable(SSDT), persistence a…☆21Jul 6, 2024Updated 2 years ago
- This project is an EDRSandblast fork, adding some features and custom pieces of code.☆16Jan 10, 2024Updated 2 years ago
- Three different shellcode techniques on the Windows Kernel☆24Apr 8, 2025Updated last year
- A Multilayered AV/EDR Evasion Framework and AV Testing Tool.☆35Jun 28, 2025Updated last year
- Evasive shellcode loader for Red Teaming☆20Aug 15, 2025Updated last year
- Detour hooking IRQ1 ISR through IDT (Interrupt Descriptor Table)☆21Mar 16, 2026Updated 7 months ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Slides and POC demo for my talk at Divizion Zero on EDR evasion titled "Evasion Adventures"☆31Jan 14, 2023Updated 3 years ago
- BadExclusions is a tool to identify folder custom or undocumented exclusions on AV/EDR☆21Feb 8, 2024Updated 2 years ago
- Experimental Windows .text section Patch Detector☆23Jan 26, 2015Updated 11 years ago
- silence file system monitoring components by hooking their minifilters☆63Jan 31, 2024Updated 2 years ago
- Decoder for VMProtect hwids☆21Aug 1, 2022Updated 4 years ago
- Implementation of KlezVirus' silent moonwalk approach for payloads☆18Feb 13, 2026Updated 8 months ago
- UEFI Bootkit that infects kernel with backdoor using SSDT hook☆27Jul 9, 2025Updated last year
- A simple C++ driver base with KD data block☆11Jun 25, 2022Updated 4 years ago
- AuthStrike is an identity and authentication security testing tool for controlled simulations, security research, and education purpose o…☆20Sep 9, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- UEFI Environment for VisualStudio (MSVC), Extremely easy to setup.☆17Sep 25, 2026Updated last month
- Detects Module Stomping as implemented by Cobalt Strike☆17Dec 13, 2020Updated 5 years ago
- Alternative Read and Write primitives using Rtl* functions the unintended way.☆79Aug 25, 2025Updated last year
- GDB TCP protocol proxy to inject/hooks GDB client requests to the target.☆18Apr 17, 2020Updated 6 years ago
- Simple PoC to locate hooked functions by EDR in ntdll.dll☆45Jul 16, 2023Updated 3 years ago
- A New Exploitation Technique for Visual Studio Projects☆13Nov 5, 2023Updated 2 years ago
- Idiomatic Rust Bindings for Windows Hypervisor Platform☆13Apr 11, 2026Updated 6 months ago
- Rust unsafe bindings for Vid API (Hyper-V)☆24Feb 23, 2025Updated last year
- Bypassing AV, EDR, Application Whitelisting and ASR Rules☆13Apr 18, 2023Updated 3 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Header-only compile-time string obfuscation for C++, hiding literals from static analysis and reacting to debuggers at runtime.☆15Oct 5, 2026Updated 3 weeks ago
- An MCP server wrapping `kd.exe` for Windows kernel debugging☆17May 13, 2026Updated 5 months ago
- A C#-implemented malware that dynamically modifies its own hash upon each execution to evade detection.☆15Feb 3, 2025Updated last year
- ☆26Sep 29, 2022Updated 4 years ago
- Easy peasy file uploads☆44Jun 18, 2026Updated 4 months ago
- stack based arithmetic only virtual machine (VM) executes bytecode instructions to perform various basic arithmetic operations and manage…☆27Mar 19, 2025Updated last year
- ☆50Jun 30, 2020Updated 6 years ago