/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

binarydebt.wordpress.com
| | www.goncharov.xyz

[AI summary] A technical post explains the methodology for intercepting system calls in the Linux x86_64 kernel using kernel modules, including details on MSR registers and memory protection flags.
2.0 parsecs

Travel
| |
| | modexp.wordpress.com

Introduction Quick post about Windows System calls that I forgot about working on after the release of Dumpert by Cn33liz last year, which is described in this post. Typically, EDR and AV set hooks on Win32 API or NT wrapper functions to detect and mitigate against malicious activity. Dumpert attempts to bypass any user-level hooks...
3.7 parsecs

Travel
| |
| | johnnysswlab.com

We talk about how to detect if your program is spending a lot of time in kernel mode (system mode) and investigate ways to speed them up.
3.1 parsecs

Travel
| |
| | 77wolfhowls.wordpress.com

Metal Detectors In Movie Theaters.
8.0 parsecs

Travel
|