
EDRChoker
A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.
defensive-toolsids-ips-evasionpersistence-mechanisms+3
319

A tool uses the QoS Policy (Pacer.sys) to throttle Endpoint Detection and Response (EDR) agents from connecting to the server.

This is a keylogger that collects all the data and e-mail it in a set time with system information which includes device S/N and hardware specs,…

Win32 and Kernel abusing techniques for pentesters

Windows kernel driver technique that hides kernel threads by abusing IoCancelIrp and IRP cancel routines, with detection methods for identifying…

exp for CVE-2019-0887