Ring -1 engine for MitM attacks on CPU registers. Leverages $DR0$-$DR7$ for zero-footprint interception, real-time data sniffing, and active argument tampering via WriteProcessMemory. Facilitates EDR bypass without modifying app code.
mitm cybersecurity pentesting hardening post-exploitation zero-footprint ttps mitre-attack red-teaming edr-evasion cpu-registers
-
Updated
May 7, 2026 - Rust