corpus.blog
42,923 blogs · 5,458,805 posts Claim your blog
Record · corpus.blog/posts/01a087b7-66f6-7385-a2ad-6292999cb053

Reflective DLL got Indirect Syscall skills

oldboy21.github.io · published 12 February 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at oldboy21.github.io Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
19
Words captured
5,498

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://github.com/oldboy21/SyscallMeMaybe
github.com
https://learn.microsoft.com/nl-nl/windows-hardware/drivers/gettingstarted/user-mode-and-kernel-mode
learn.microsoft.com
https://redops.at/en/blog/direct-syscalls-vs-indirect-syscalls
redops.at
https://twitter.com/VirtualAllocEx
twitter.com
https://redops.at/en/blog/direct-syscalls-a-journey-from-high-to-low
redops.at
https://alice.climent-pommeret.red/posts/direct-syscalls-hells-halos-syswhispers2/
alice.climent-pommeret.red
https://www.ired.team/offensive-security/defense-evasion/using-syscalls-directly-from-visual-studio-to-bypass-avs-edrs
ired.team
https://twitter.com/spotheplanet
twitter.com
https://www.outflank.nl/blog/2019/06/19/red-team-tactics-combining-direct-system-calls-and-srdi-to-bypass-av-edr/
outflank.nl
https://www.outflank.nl/blog/author/cornelis/
outflank.nl
https://github.com/am0nsec/HellsGate
github.com
https://blog.sektor7.net/
blog.sektor7.net
https://github.com/crummie5/FreshyCalls
github.com
https://github.com/jthuraisamy/SysWhispers2
github.com
https://github.com/klezVirus/SysWhispers3
github.com
https://klezvirus.github.io/RedTeaming/AV_Evasion/NoSysWhisper/
klezvirus.github.io
https://github.com/oldboy21/SyscallMeMaybe/blob/3f5c9704cf88f209c8b9e27d9c3ab02aa472707b/SyscallMeMaybe/SyscallMeMaybe.cpp
github.com
https://learn.microsoft.com/en-us/cpp/build/reference/stack-stack-allocations?view=msvc-170
learn.microsoft.com
https://learn.microsoft.com/en-us/cpp/build/x64-calling-convention?view=msvc-170
learn.microsoft.com
Elsewhere on oldboy21.github.io (1)