Two Seven One Three

While I was trying to evade cloud-based EDRs, I accidentally found a way to temporarily block a client's machine network with a POC running as a Normal user. Not using the Windows Filtering Platform (WFP) which requires Admin priv I haven't thought of exploitation scenarios for this tool yet, it might be a dead-end #antimalware research direction 🤔 #redteam