
Disable-TamperProtection
A POC to disable TamperProtection and other Defender / MDE components
adversarial-attackpenetration-testingpost-exploitation+1
258

A POC to disable TamperProtection and other Defender / MDE components

A slightly more fun way to disable windows defender + firewall. (through the WSC api)

Proof-of-concept exploit for CVE-2026-22003 demonstrating Redis Lua sandbox escape via debug.sethook to execute arbitrary system commands.