tkmru/awesome-edr-bypass resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1585 stars · 153 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated awesome-list of resources, proof-of-concept code, and tools for bypassing Endpoint Detection and Response (EDR) software, aimed at ethical hacking, penetration testing, and incident response education. It aggregates links to techniques like direct syscalls, API unhooking, and EDR telemetry blocking.

Use cases

• find resources on EDR bypass techniques for red team engagements
• learn how malware evades endpoint detection and response tools
• research syscall unhooking and direct syscall techniques
• test the detection accuracy of an EDR product
• prepare for offensive security certifications or pentest work
• understand attacker tradecraft as an incident responder

When to choose

• you need a curated starting point for EDR evasion research
• you are a red teamer or pentester studying detection bypass techniques
• you are a defender or incident responder wanting to understand attacker methods

When to avoid

• you need a ready-to-use production security tool rather than a link collection
• you want defensive EDR software itself
• you lack authorization for offensive security testing, as misuse is illegal

Facets

learning-resource · maturity active

security penetration-testing developer-tools security penetration-testing awesome-lists reverse-engineering windows cross-platform awesome-list edr-bypass red-team ethical-hacking curated-resources offensive-security

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tkmru/awesome-edr-bypass")