/explore
|
You are here 
|
redops.at | ||
| | | | |
www.malwaretech.com
Understanding the basics of user mode EDR hooking, common bypass techniques, and their limitations. |
|
| | | | | ||
| | | | |
oldboy21.github.io
Ciao World, since I can't get enough of playing around with the Reflective DLL that inspired the very first blog during the Christmas Holiday, after the YOLO Loader I decided to grant the little nasty DLL a new super-power: Indirect syscalls So what I will be addressing here is: Indirect syscall: why and (mostly) references SSN enum and PIC challenges 1 tb of MASM Disclaimer I write code and implement techniques for research and learning purposes only. |
|
| | | | | ||
| | | | |
blacklight.sh
A beginner's guide to bypassing EDR systems using APC queue injection and direct system calls. |
|
| | | | | ||
| | | | |
a13xp0p0v.tech
CVE-2021-26708 is assigned to five race condition bugs in the virtual socket implementation of the Linux kernel. I discovered and fixed them in January 2021. In this article I describe how to exploit them for local privilege escalation on Fedora 33 Server for x86_64, bypassing SMEP and SMAP. |
|
| | | |||
