KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #typescript #claude-code #codex #dsh #dsh-plugin #ai-agent #ai-agents #deepseek-harness #agent-skills #macos #cli

EDR-Freeze

★ 862 Open GitHub ↗

EDR-Freeze is a tool that puts a process of EDR, AntiMalware into a coma state.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

### EDR-Freeze

This is a tool that exploits the software vulnerability of WerFaultSecure to suspend the processes of EDRs and antimalware without needing to use the BYOVD (Bring Your Own Vulnerable Driver) attack method.

EDR-Freeze operates in user mode, so you don't need to install any additional drivers. It can run on the latest version of Windows.

*The experiment was conducted with the latest version of Windows at the time of the project creation: __Windows 11 24H2__*

### Command Line Syntax

**EDR-Freeze.exe [TargetPID] [SleepTime]**

*Example: __EDR-Freeze.exe 1234 10000__*

*Freeze the target for 10000 milliseconds*

## Links

[EDR-Freeze: A Tool That Puts EDRs And Antivirus Into A Coma State](https://www.zerosalarium.com/2025/09/EDR-Freeze-Puts-EDRs-Antivirus-Into-Coma.html)

[Tool to run process with PPL without driver](https://github.com/TwoSevenOneT/CreateProcessAsPPL)

## Demo Video

Youtube: [https://www.youtube.com/watch?v=vFcbE94qD70](https://www.youtube.com/watch?v=vFcbE94qD70)

## How to Use EDR-Freeze Effectively

Instead of running EDR-Freeze with a long sleep duration, you should incorporate it into a script with the following steps:

1. Temporarily halt all Antimalware/EDR processes for a short period (1-3 seconds).
2. Execute tasks immediately after a successful suspension.

Since the GUI may become unresponsive in some cases, you should choose the shortest sleep time possible. Just make sure that the script executions are completed before the Antimalware/EDR resumes.

Alternatively, it's best to insert the code you want to execute directly into the source code of EDR-Freeze:

## 🐦 Enjoying my work? Support the journey by following me on X

[![Twitter Follow](https://img.shields.io/twitter/follow/TwoSevenOneT?style=for-the-badge&logo=x&color=000)](https://x.com/TwoSevenOneT)

## Tools For Security Researcher and Hacker

Essential tools that every security researcher and hacker should have in their toolkit:

[Essential Tools For Security Researcher and Hacker](https://www.zerosalarium.com/p/essential-tools-for-security-researcher.html)

## READING

Some books you should read to sharpen your cybersecurity skills, especially in offensive security:

[Books on Programming and Cybersecurity recommended by Zero Salarium Researchers](https://www.zerosalarium.com/2025/10/books-on-programming-and-cybersecurity-recommended.html)

## Author:

[Two Seven One Three](https://x.com/TwoSevenOneT)

EDR-Freeze

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README