/explore
|
You are here 
|
blog.xenoscr.net | ||
| | | | |
oldboy21.github.io
Ciao World, since I can't get enough of playing around with the Reflective DLL that inspired the very first blog during the Christmas Holiday, after the YOLO Loader I decided to grant the little nasty DLL a new super-power: Indirect syscalls So what I will be addressing here is: Indirect syscall: why and (mostly) references SSN enum and PIC challenges 1 tb of MASM Disclaimer I write code and implement techniques for research and learning purposes only. |
|
| | | | | ||
| | | | |
www.malwaretech.com
Understanding the basics of user mode EDR hooking, common bypass techniques, and their limitations. |
|
| | | | | ||
| | | | |
blog.quarkslab.com
[AI summary] The blog post discusses the implementation of a hooking mechanism for Go programs, focusing on the challenges of intercepting function calls and managing concurrency issues. The approach involves modifying the execution flow of Go functions by inserting custom assembly code to handle stack pivoting, ABI switching, and register saving. This allows for the integration of C functions within Go code while addressing platform-specific limitations and concurrency problems. The post highlights the complexity of working with Go's internal structures and the benefits of using Go for hooking, as it simplifies the manipulation of Go types and data structures. |
|
| | | | | ||
| | | | |
wsummerhill.github.io
Malware Development Introduction (aka Malware Dev 101), Part 2 - Evasion Basics |
|
| | | |||
