gmh5225/mhydeath
Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.
Reproducing Spyboy technique to terminate all EDR/XDR/AVs processes
Appears on
Quick read
Latest capture 2026-09-02 03:06
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
4 observed captures since 2026-06-24. Observed captures are shown by default.
Stars from first capture 0
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
Abusing mhyprotect to kill AVs / EDRs / XDRs / Protected Processes.
Proof of Concepts code for Bring Your Own Vulnerable Driver techniques
PoC exploit for the vulnerable WatchDog Anti-Malware driver (amsdk.sys) – weaponized to kill protected EDR/AV processes via BYOVD.
WIP steam HWID collection block
BYOVD process killer
Hasta la vista, shell — the T-800 that babysits (and occasionally obliterates) your Terminal tabs. Built to kill hung jobs, not humans.