Explore >> Select a destination

You are here

 cocomelonc.github.io
Malware AV/VM evasion - part 16: WinAPI GetProcAddress implementation. Simple C++ example. - cocomelonc
| | bruteratel.com
Exception Junction - Where All Exceptions Meet Their Handler | Brute Ratel C4
3.4 parsecs away

Travel
| | This blog is in relation to some of the hurdles I've met while debugging and researching various new features for Brute Ratel. Before we get started, let me inform you that this blog is not for beginners. It requires some knowledge about Windows internals, exception handlers, and getting your hands dirty with a debugger, preferably x64dbg. And to add to that, there's limited to near zero information on the web related to this topic, thus I spent the last 24 hours researching and writing this from scratch while being high on caffeine.
| | bohops.com
No Alloc, No Problem: Leveraging Program Entry Points for Process Injection - bohops
3.5 parsecs away

Travel
| | Introduction Process Injection is a popular technique used by Red Teams and threat actors for defense evasion, privilege escalation, and other interesting use cases. At the time of this publishing, MITRE ATT&CK includes 12 (remote) process injection sub-techniques. Of course, there are numerous other examples as well as various and sundry derivatives. Recently, I was...
| | alice.climent-pommeret.red
EDR Bypass : How and Why to Unhook the Import Address Table - Alice Climent-Pommeret
2.3 parsecs away

Travel
| |
| | mrcat.au
Advent of Code 2023 - TheOnlyMrCat
24.1 parsecs away

Travel
| [AI summary] The author plans to participate in the Advent of Code 2023 programming challenge, sharing their solutions and code in various languages while emphasizing the learning and fun aspects over leaderboard competition.