Record · corpus.blog/posts/01a087a9-7e7f-73bd-bdd7-c20d4a103f93

(Sys)Call Me Maybe: Exploring Malware Syscalls with PANDA

Push the Red Button · published 27 August 2015

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at moyix.blogspot.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 27
Words captured: 839

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

http://j00ru.vexillium.org/ntapi/

j00ru.vexillium.org

http://laredo-13.mit.edu/~brendan/malrec/malrec_syscalls.tar

laredo-13.mit.edu

http://laredo-13.mit.edu/~brendan/malrec/malrec_syscalls.tar.md5

laredo-13.mit.edu

http://laredo-13.mit.edu/~brendan/malrec/malrec_syscalls.torrent

laredo-13.mit.edu

http://j00ru.vexillium.org/?p=1455

j00ru.vexillium.org

http://j00ru.vexillium.org/?p=866

j00ru.vexillium.org

http://j00ru.vexillium.org/?p=1479

j00ru.vexillium.org

http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-2553

cve.mitre.org

https://www.exploit-db.com/exploits/3755/

exploit-db.com

https://technet.microsoft.com/library/security/ms07-017

technet.microsoft.com

http://j00ru.vexillium.org/?p=783

j00ru.vexillium.org

http://blog.ptsecurity.com/2012/09/intel-smep-overview-and-partial-bypass.html

blog.ptsecurity.com

http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Just-another-day-at-the-office-A-ZDI-analyst-s-perspective-on/ba-p/6710637

h30499.www3.hp.com

http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0058

cve.mitre.org

https://www.exploit-db.com/bypassing-uac-with-user-privilege-under-windows-vista7-mirror/

exploit-db.com

https://twitter.com/markwo/status/637021939790319616

twitter.com

http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-4398

cve.mitre.org

https://technet.microsoft.com/library/security/ms11-011

technet.microsoft.com

https://github.com/JeremyFetiveau/Exploits/blob/master/MS10-058.cpp

github.com

http://blog.cr0.org/2010/01/cve-2010-0232-microsoft-windows-nt-gp.html

blog.cr0.org

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0232

cve.mitre.org

https://github.com/moyix/panda/commit/58f2d4a1823f5257841ace63266de17f93e33905

github.com

http://laredo-13.mit.edu/~brendan/malrec/sc32_counts.txt

laredo-13.mit.edu

http://laredo-13.mit.edu/~brendan/malrec/sc64_counts.txt

laredo-13.mit.edu

http://laredo-13.mit.edu/~brendan/malrec/sc/32bit/allcall.txt.gz

laredo-13.mit.edu

http://laredo-13.mit.edu/~brendan/malrec/sc/64bit/allcall.txt.gz

laredo-13.mit.edu

https://www.reddit.com/r/Malware/comments/3in9mf/syscall_me_maybe_exploring_malware_syscalls_with/cuijurp

reddit.com