Record · corpus.blog/posts/01a08778-e061-7066-a991-c1021edeeddc

Hells Gate Rust - EDR Evasion with syscalls

fluxsec.red · published 2 February 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at fluxsec.red Wayback capture

1blogs citing

First cited: 18 Sept 2025
Most recent: 18 Sept 2025
Rank this month: not ranked
Links from this post: 23
Words captured: 5,166

Cited by

Blog

In the post

Date

0xsp.com

Implementing Hell’s Gate in Zig – Part 1 Read at the source ↗

18 Sept 2025

Links from this post

Link

Host

https://github.com/0xflux/Rust-Hells-Gate/

github.com

DLL Injection EDR Evasion 1: Hiding an elephant in the closet Read at the source ↗

fluxsec.red

Reading Event Tracing for Windows Threat Intelligence Read at the source ↗

fluxsec.red

https://fluxsec.red/

fluxsec.red

https://vxug.fakedoma.in/papers/VXUG/Exclusive/HellsGate.pdf

vxug.fakedoma.in

Remote process DLL injection in Rust Read at the source ↗

fluxsec.red

https://redops.at/en/blog/exploring-hells-gate

redops.at

Introduction to the Windows API in Rust with a DLL Loader Read at the source ↗

fluxsec.red

https://learn.microsoft.com/en-us/windows/win32/api/fileapi/nf-fileapi-createfilea

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-openprocess

learn.microsoft.com

https://github.com/ikermit/11Syscalls

github.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/ntddk/nf-ntddk-ntopenprocess

learn.microsoft.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/access-mask

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/api/ntdef/ns-ntdef-_object_attributes

learn.microsoft.com

https://microsoft.github.io/windows-docs-rs/doc/windows/Wdk/Foundation/struct.OBJECT_ATTRIBUTES.html

microsoft.github.io

https://microsoft.github.io/windows-docs-rs/doc/windows/Win32/System/WindowsProgramming/struct.CLIENT_ID.html

microsoft.github.io

https://www.nirsoft.net/kernel_struct/vista/CLIENT_ID.html

nirsoft.net

https://github.com/winsiderss/phnt/tree/master

github.com

https://github.com/winsiderss/phnt/blob/master/phnt_ntdef.h

github.com

https://eforensicsmag.com/windows-process-internals-a-few-concepts-to-know-before-jumping-on-memory-forensics-part-5-a-journey-in-to-the-undocumented-process-handle-structures-_handle_table-_handle_table_entry/

eforensicsmag.com

https://docs.rs/windows-sys/latest/windows_sys/Win32/System/Threading/struct.PEB.html

docs.rs

https://docs.rs/windows-sys/latest/windows_sys/Win32/System/WindowsProgramming/struct.LDR_DATA_TABLE_ENTRY.html

docs.rs

Str Crypter - Payload string encryption with Rust Read at the source ↗

fluxsec.red