RC RANDOM CHAOS

EDR Evasion

4 posts

Google killed io_uring fleet-wide in 2023
Article

Google killed io_uring fleet-wide in 2023

io_uring runs file and network operations off the syscall path, blinding seccomp, auditd, and EDR, while epoll stays observable to defenders.

 Steam's I/O thread is holding a dead pointer
Article

Steam's I/O thread is holding a dead pointer

Transport-layer race condition in Valve's GameNetworkingSockets creates a remote UAF primitive that sits below session crypto and evades EDR telemetry.

 Recruiters filtered out the operators who can actually breach
Article

Recruiters filtered out the operators who can actually breach

Why most pentesters fail within ninety days: identity reasoning, EDR evasion, and control bypass sit outside the certifications they trained on.

 CVE-2024-21412: SmartScreen Bypass via Internet Shortcut Files
Article

CVE-2024-21412: SmartScreen Bypass via Internet Shortcut Files

CVE-2024-21412 enables SmartScreen bypass via malformed .url files; exploited by APT29 to deliver payloads without triggering EDR alerts or process creation telemetry.