corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08796-34ba-7152-bb84-2ca6fa818e21

Fantastic unwind information and where to find them

klezvirus.github.io · published 16 March 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at klezvirus.github.io Wayback capture
1blogs citing
First cited
1 Jun 2026
Most recent
1 Jun 2026
Rank this month
not ranked
Links from this post
36
Words captured
7,524

Cited by

Blog
In the post
Date
aff-wg.org
Relax and unwind in the Tradecraft Garden Read at the source ↗
1 Jun 2026

Links from this post

Link
Host
https://klezvirus.github.io/posts/Moonwalk++/
klezvirus.github.io
Callback hell: abusing callbacks, tail-calls, and proxy frames to obfuscate the stack Read at the source ↗
klezvirus.github.io
https://windows-internals.com/cet-on-windows/
windows-internals.com
https://klezvirus.github.io/imgs/blog/009Byoud/cet-exception.png
klezvirus.github.io
SilentMoonwalk: Implementing a dynamic Call Stack Spoofer Read at the source ↗
klezvirus.github.io
https://learn.microsoft.com/en-us/cpp/build/exception-handling-x64
learn.microsoft.com
https://github.com/klezVirus/RpcProxyInvoke
github.com
https://klezvirus.github.io/imgs/blog/009Byoud/target-stack-area.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/unwind-code-inspection.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/unwind-code-structure.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/direct-tampering-workflow.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/poc-execution.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/offset-hijacking.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/rf-injection.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/rf-injection-workflow.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/rf-reuse.png
klezvirus.github.io
https://maxdcb.github.io/DreamWalkers/
maxdcb.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/dreamwalker-exposed-frames.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/jit-byoud-combo.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/eclipse-detect.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/sysinformer.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/windbg.png
klezvirus.github.io
https://www.ired.team/offensive-security/defense-evasion/finding-all-rwx-protected-memory-regions
ired.team
https://www.elastic.co/security-labs/finding-truth-in-the-shadows
elastic.co
https://klezvirus.github.io/imgs/blog/009Byoud/byoud-sdie.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/sdie-flow.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/state-machine.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/sdie-vs-cet.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/unwind-inspector-alert.png
klezvirus.github.io
https://klezvirus.github.io/imgs/blog/009Byoud/byoud-vs-cet.png
klezvirus.github.io
https://github.com/gabriellandau/ShadowStackWalk
github.com
https://github.com/klezVirus/byoud
github.com
https://www.unknowncheats.me/forum/anti-cheat-bypass/268039-x64-return-address-spoofing-source-explanation.html
unknowncheats.me
https://learn.microsoft.com/en-us/cpp/build/prolog-and-epilog
learn.microsoft.com
https://offensivecraft.wordpress.com/2022/12/08/the-stack-series-return-address-spoofing-on-x64/
offensivecraft.wordpress.com
https://x.com/namazso
x.com