diff --git a/Offensive.md b/Offensive.md
index fffcbbd..f2fd4ce 100644
--- a/Offensive.md
+++ b/Offensive.md
@@ -1624,6 +1624,10 @@ Some tools can be categorized in more than one category. But because the current
l373/GIVINGSTORM |
Infection vector that bypasses AV, IDS, and IPS. (For now...) |
+
+ last-byte/RIPPL |
+ RIPPL is a tool that abuses a usermode only exploit to manipulate PPL processes on Windows |
+
last-byte/unDefender |
Killing your preferred antimalware by abusing native symbolic links and NT paths. |