Uncensored Local AI Produces LSASS Dumper That Evaded Lab EDR Tests

Project Black researcher Eddie Zhang reported that a community-modified, locally hosted Qwen 3.8 27B model altered a Windows LSASS credential-dumping executable so that it avoided detection by two unnamed EDR products in a controlled lab test. The initial tool, generated by DeepSeek v4 Flash 0731, created an encrypted, parsable LSASS minidump but was detected; after a minimal request to make it stealthier, the uncensored local model modified the executable and reportedly produced no alerts.

The result does not establish a universal EDR bypass because the tested products and configurations were not disclosed, but it shows how guardrail-free local AI can reduce the time and expertise needed to tailor post-exploitation credential theft tools. Organizations should harden LSASS using Attack Surface Reduction rules, Protected Process Light and Credential Guard; enforce least privilege and privileged-account separation; and monitor for anomalous LSASS access and credential-dumping behavior.