milliways-infosec/UnDefend
7
0
Fork 0
mirror of https://github.com/Nightmare-Eclipse/UnDefend.git synced 2026-05-26 16:00:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update README.md

Browse source
This commit is contained in:
Nightmare-Eclipse 2026-04-13 01:07:10 +02:00 • committed by GitHub
parent 0a7ecc2677
commit 4bb0b1227b
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 12 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

12
README.md
View file

@ -1,2 +1,14 @@
# UnDefend # UnDefend
Repository hosting windows defender DOS tool Repository hosting windows defender DOS tool
This tool runs in two modes, passive and aggressive,
In Passive mode, the PoC blocks all signature updates, causing defender to be unable to detect any new threats so if anything new is pushed by Microsoft, it is immediately blocked.
![BottomText](UpdateError.png)
In Aggressive mode, the PoC aims to completely disable but it only works if Microsoft pushes a major platform update (update of MsMpEng.exe and other binaries), this update isn't pushed occasionally like signature updates so the PoC runs in passive mode by default. However, if you expect a major platform update, set the PoC to run in aggressive mode and it will cause windows defender to stop responding. It will be completely disabled and you can run whatever you want without having defender interfer in your business.
![BottomText](EngineUnavailable.png)
Now funnily enough, I found a way to lie to the EDR web console to show that defender is up and running with the latest update even if it's not. I was thinking about publishing the code but after thinking about it, it will cause waaay too much damage so I think I'll keep that stuff stashed for now.