/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 oldboy21.github.io
Reflective DLL got Indirect Syscall skills :: Vincenzo - Blog
| | blog.quarkslab.com
Lets Go into the rabbit hole (part1) the challenges of dynamically hooking Golang programs
4.5 parsecs away

Travel
| | [AI summary] The blog post discusses the implementation of a hooking mechanism for Go programs, focusing on the challenges of intercepting function calls and managing concurrency issues. The approach involves modifying the execution flow of Go functions by inserting custom assembly code to handle stack pivoting, ABI switching, and register saving. This allows for the integration of C functions within Go code while addressing platform-specific limitations and concurrency problems. The post highlights the complexity of working with Go's internal structures and the benefits of using Go for hooking, as it simplifies the manipulation of Go types and data structures.
| | modexp.wordpress.com
Invoking System Calls and Windows Debugger Engine | modexp
4.5 parsecs away

Travel
| | Introduction Quick post about Windows System calls that I forgot about working on after the release of Dumpert by Cn33liz last year, which is described in this post. Typically, EDR and AV set hooks on Win32 API or NT wrapper functions to detect and mitigate against malicious activity. Dumpert attempts to bypass any user-level hooks...
| | redops.at
Direct Syscalls vs Indirect Syscalls - RedOps - English
2.2 parsecs away

Travel
| |
| | thewover.github.io
Emulating Covert Operations - Dynamic Invocation (Avoiding PInvoke & API Hooks) - The Wover - Red Teaming, .NET, and random computing topics
33.6 parsecs away

Travel
| TLDR: Presenting DInvoke, a new API in SharpSploit that acts as a dynamic replacement for PInvoke. Using it, we show how to dynamically invoke unmanaged code from memory or disk while avoiding API Hooking and suspicious imports.