/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 blog.quarkslab.com
Lets Go into the rabbit hole (part1) the challenges of dynamically hooking Golang programs
| | oldboy21.github.io
Reflective DLL got Indirect Syscall skills :: Vincenzo - Blog
4.5 parsecs away

Travel
| | Ciao World, since I can't get enough of playing around with the Reflective DLL that inspired the very first blog during the Christmas Holiday, after the YOLO Loader I decided to grant the little nasty DLL a new super-power: Indirect syscalls So what I will be addressing here is: Indirect syscall: why and (mostly) references SSN enum and PIC challenges 1 tb of MASM Disclaimer I write code and implement techniques for research and learning purposes only.
| | blog.xenoscr.net
x86 Nirvana Hooks & Manual Syscall Detection
5.2 parsecs away

Travel
| | [AI summary] A detailed technical analysis of detecting manual syscalls in 32-bit x86 processes using Nirvana Hooks and a modified version of the Syscall-Detect project.
| | cronop-io.github.io
Protostar - Stack 5 | Cronop.io
5.4 parsecs away

Travel
| | Walkthrough of a simple binary exploitation
| | neodyme.io
The Key to COMpromise - Abusing a TOCTOU race to gain SYSTEM, Part 2 - Neodyme
27.3 parsecs away

Travel
| In this series of blog posts, we cover how we could exploit five reputable security products to gain SYSTEM privileges with COM hijacking. If you've never heard of this, no worries. We introduce all relevant background information, describe our approach to reverse engineering the products' internals, and explain how we finally exploited the vulnerabilities. We hope to shed some light on this undervalued attack surface.