Оригинал: x-c3ll.github.io Прошлым летом я много времени беседовал с @cgvwzq о трюках с антиотладкой в JavaScript. Мы пытались найти ресурсы или статьи, в которых эта тема была бы проанализирована, но документация оказалась плохой и в основном неполной.…

This article is a selection of tips for IDA Pro

Introduction In the course of building a custom C2 framework, I frequently find features from other frameworks I’d like to implement. Cobalt Strike is obviously a major source of inspiration, given its maturity and large feature set. The only downside to…

Developers apply API hooking practices to better understand how a system works, alter the behavior of an operating system or an application, detect malicious code, and build strong products. The majority of guides and tutorials on Windows API hooking are…

Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2 - yardenshafir/IoRingReadWritePrimitive

Process Injection without R/W target memory and without creating a remote thread - Maff1t/InjectNtdllPOC