/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 cocomelonc.github.io
Malware AV/VM evasion - part 16: WinAPI GetProcAddress implementation. Simple C++ example. - cocomelonc
| | modexp.wordpress.com
Invoking System Calls and Windows Debugger Engine | modexp
3.1 parsecs away

Travel
| | Introduction Quick post about Windows System calls that I forgot about working on after the release of Dumpert by Cn33liz last year, which is described in this post. Typically, EDR and AV set hooks on Win32 API or NT wrapper functions to detect and mitigate against malicious activity. Dumpert attempts to bypass any user-level hooks...
| | alice.climent-pommeret.red
EDR Bypass : How and Why to Unhook the Import Address Table - Alice Climent-Pommeret
2.3 parsecs away

Travel
| |
| | wsummerhill.github.io
Malware Development Introduction aka Malware Dev 101 - Part 2 - Will Summerhill
2.7 parsecs away

Travel
| | Malware Development Introduction (aka Malware Dev 101), Part 2 - Evasion Basics
| | blog.thalheim.io
Nix-ld: A clean solution for issues with pre-compiled executables on NixOS | ~/git/blog
18.2 parsecs away

Travel
| No such file or directory: How I stopped worrying and started loving binaries on NixOS. In this article, I will discuss the technical issue of running pre-compiled executables on NixOS, and how we can improve the user experience by making these binaries work seamlessly using nix-ld. One of the key benefits of NixOS is its focus on purity and reproducibility. The operating system is designed to ensure that the system configuration and installed software are always in a known and predictable state.