BypassGym tests whether AI agents can evade deployed EDR
DeepSeek-V4.1 Flash succeeded on 17 of 18 runs; Bitdefender blocked all but 5 of 15.
Stories per day · 30 days
2 RSS
Relatedbenchmark1bitdefender1edr-evasion1endpoint-security1imgdecode1infostealer1llm-agents1malfex1nodejs1npm1supply-chain1
5 stories, newest first · one card per story
Stories tagged #shellcode
MALFEX npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon
Malicious npm package imgdecode, tied to MALFEX, loads a DLL that downloads and injects shellcode.
5
Calling a function in C without naming it
Student write-up demonstrates calling execve in C without naming the symbol, bypassing an automated code grader's AST-based function allowlist checks.
2
EvilVM: Forth shellcode
EvilVM is a 5-10KB position-independent Forth shellcode that provides a remote interactive shell.
Threat Brief: 3CXDesktopApp Supply Chain Attack (Updated)
Trojanized 3CXDesktopApp installers for Windows and macOS loaded RC4-encrypted shellcode delivering a backdoor to hundreds of thousands of 3CX users.