GitHunt
BY

ByteWhite1x1/EDR-bypass-disable-PspNotifyEnableMask

A single byte modification in the kernel memory bypasses and disables all core functions of the AV/EDR security solutions

EDR-bypass-disable-PspNotifyEnableMask

A single byte modification in the kernel memory bypasses and disables all core functions of the AV/EDR and endpoint protection security solutions.

HEX DEREF Anti-malware X is also prepared for this attack: https://hexderef.com/platform https://hexderef.com/advanced-endpoint-protection

Languages

C100.0%

Contributors

The Unlicense
Created September 8, 2023
Updated March 5, 2026
ByteWhite1x1/EDR-bypass-disable-PspNotifyEnableMask | GitHunt