github.com/MatheuZSecurity/U… Hey guys, I posted a really cool zine in pure TXT about Unhooking Linux EDR, attacking the cleanup_module function, to be able to remove any hook from an EDR for example. Feel free to read.

Apr 2, 2025 · 12:03 PM UTC

3
43
149
Replying to @MatheuzSecurity
Whoa, this is wild—unhooking EDRs like that is clever! I’ve been digging into kernel stuff lately too. Ever tried messing with kprobes for this? Just sent you a little something in DMs you might like—check it out when you can!
Replying to @MatheuzSecurity
kprobes/uprobes?
Load more