Locked Freeze - Bypassing EDRs using suspended processes, direct syscalls, and alternative execution methods

[patr0n]

This is the hidden content, please

• Sign In
• or
• Sign Up

Freeze is a payload creation tool used for circumventing EDR security controls to execute shellcode in a stealthy manner. Freeze utilizes multiple techniques to not only remove Userland EDR hooks, but to also execute shellcode in such a way that it circumvents other endpoint monitoring controls.

Tested on Metasploit, Cobalt Strike

Download:

This is the hidden content, please

• Sign In
• or
• Sign Up

Edited September 24, 2023 by patr0n
update image