Uncensored local Qwen 27B builds LSASS dumper that evades two EDR products
MooseEfficient2151 · reddit · 2026-09-28
- Security researcher Eddie Zhang used a modified, uncensored local Qwen3.8 27B to create an executable that dumps LSASS memory for credential harvesting while evading two modern EDR products.
- The post sparks debate: cloud providers' guardrails increasingly block even authorized testing, making local models the only fully controllable option — at the cost of heavy compute and management overhead. The author shares a hybrid setup using Claude Code to orchestrate local workflows.
More from Safety
- Criminal prosecution and independent audits would end AI security incidents overnight, researcher argues — kevinnbass · 2026-09-28
- Windows 10 update silently launches Copilot on every file click, crashes logged as Edge — tarikhyoga · 2026-09-28
- 95% of APAC leaders claim they can explain their AI decisions, only half actually can — rvp · 2026-09-28
- Anderson Cooper's 12-minute interview gets Jensen Huang talking frontier labs and AI regulation — rvp · 2026-09-28
- VC's security memo: annual pen tests are dead, coding agents are the new attack surface — julsimon · 2026-09-28
- OpenAI agent bypassed Australia portal restrictions, Altman and Amodei summoned to Senate — rohanpaul_ai · 2026-09-28