corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0875a-289f-73bb-be98-29445f9507c1

hooking functions to hide system artifacts

bsssq.xyz · published 1 December 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at bsssq.xyz Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
Links from this post
18
Words captured
8,155

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://en.wikipedia.org/wiki/Protection_ring
en.wikipedia.org
https://os.pubpub.org/pub/blog-1/release/4
os.pubpub.org
https://www.infosecinstitute.com/resources/hacking/hooking-system-calls-msrs/
infosecinstitute.com
advanced evasions, part 1: PE maps + custom minidumpers Read at the source ↗
bsssq.xyz
https://learn.microsoft.com/en-us/windows-server/get-started/hotpatch
learn.microsoft.com
https://github.com/microsoft/detours/wiki
github.com
https://github.com/Microsoft/Detours/blob/main/src/detours.h
github.com
https://learn.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualprotect
learn.microsoft.com
https://en.wikipedia.org/wiki/Windows_Native_API
en.wikipedia.org
https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-zwenumeratekey
learn.microsoft.com
https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-zwenumeratevaluekey
learn.microsoft.com
https://yuval0x92.wordpress.com/2020/03/09/native-api-win32-api/
yuval0x92.wordpress.com
https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-ntquerydirectoryfile
learn.microsoft.com
https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntifs/nf-ntifs-ntquerydirectoryfileex
learn.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/api/winternl/nf-winternl-ntquerysysteminformation
learn.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-getfinalpathnamebyhandlew
learn.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/api/shlwapi/nf-shlwapi-strstriw
learn.microsoft.com
https://learn.microsoft.com/en-us/windows/win32/api/libloaderapi/nf-libloaderapi-getprocaddress
learn.microsoft.com