
EDRception
A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.
defensive-toolsexploitationids-ips-evasion+3
202

A proof of concept for abusing exception handlers to hook and bypass user mode EDR hooks.

Cloudflare Image Resizing <= 1.5.6 | Unauthenticated Remote Code Execution

Kernel-level tool to disable Sysmon and Windows Event Logging via driver-based hook injection, enabling stealthy post-exploitation operations on…