SharpBlock
SharpBlock copied to clipboard
A method of bypassing EDR's active projection DLL's by preventing entry point exection
Is it possible to block multiple dlls ? cmd and powershell crash when given multiple dll names. for example, .\sharpblock.exe -n "dll1.dll" -n "dll2.dll" --disable-bypass-amsi -e "c:\windows\system32\windowspowershell\v1.0\powershell.exe" --disable-bypass-etw --disable-header-patch -w...
``` [!] SharpBlock failed with error The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel. at System.Net.WebClient.DownloadDataInternal(Uri address, WebRequest& request) at System.Net.WebClient.DownloadData(Uri address) at...