gmh5225/mhydeath
Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.
Abusing zam64 vulnerable driver
Appears on
Quick read
Latest capture 2026-10-13 03:12
Archive status reflects the last catalog sync, not a maintenance assessment. Check recent releases, issue responses, and fit for your project with the repository shortlisting checklist.
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
5 observed captures since 2026-06-24. Observed captures are shown by default.
Stars from first capture 0
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.
PoC exploit for the vulnerable WatchDog Anti-Malware driver (amsdk.sys) – weaponized to kill protected EDR/AV processes via BYOVD.
Toshiba Qiomem.sys vulnerable driver POC
Here you can find some vulnerable Windows Kernel Drivers
It's pointy and it hurts!
Abusing SpeedFan driver ability of physical memory manipulation