
KDU
Windows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…
binary-exploitationdefensive-toolsexploitation+8
2.8k

Windows kernel driver utility that abuses vulnerable signed drivers (BYOVD) to bypass DSE, load unsigned drivers, hijack protected processes, and…

Hands-on DEFCON workshop materials for killing and silencing EDR agents: lab setup, BYOVD, custom C/C++ evasion tooling, and reverse engineering.

AV/EDR Lab environment setup references to help in Malware development

A collection of software installations scripts for Windows systems that allows you to easily setup and maintain a reverse engineering environment on…

Distributed malware processing framework based on Python, Redis and S3.

Modular malware analysis artifact collection and correlation framework