Record · corpus.blog/posts/01a0ca8b-bf78-7320-a7ac-6d521e242f4f

SAS CTF and the many ways to persist a kernel shellcode on Windows 7

Kaspersky Securelist · published 17 October 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at securelist.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 35
Words captured: 3,637

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://thesascon.com/

thesascon.com

https://learn.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-011

learn.microsoft.com

https://powerofcommunity.net/poc2012/mj0011.pdf

powerofcommunity.net

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15123608/SAS_CTF_01.png

media.kasperskycontenthub.com

https://learn.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/nf-wdm-rtlqueryregistryvalues

learn.microsoft.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15123832/SAS_CTF_02.png

media.kasperskycontenthub.com

https://msrc.microsoft.com/blog/2022/04/randomizing-the-kuser_shared_data-structure-on-windows/

msrc.microsoft.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15123917/SAS_CTF_03.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15123956/SAS_CTF_04.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15124042/SAS_CTF_05.png

media.kasperskycontenthub.com

https://pypi.org/project/regipy/

pypi.org

https://ubuntu.com/download/desktop

ubuntu.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15124711/SAS_CTF_06.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15124815/SAS_CTF_07.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15124841/SAS_CTF_08.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15124914/SAS_CTF_09.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15124940/SAS_CTF_10.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15124959/SAS_CTF_11.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125047/SAS_CTF_12.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125335/SAS_CTF_13.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125428/SAS_CTF_14.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125508/SAS_CTF_15.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125534/SAS_CTF_16.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125554/SAS_CTF_17.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125618/SAS_CTF_18.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125754/SAS_CTF_19.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15125821/SAS_CTF_20.png

media.kasperskycontenthub.com

https://raw.githubusercontent.com/rapid7/metasploit-framework/refs/heads/master/external/source/shellcode/windows/multi_arch_kernel_queue_apc.asm

raw.githubusercontent.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15130242/SAS_CTF_21.png

media.kasperskycontenthub.com

https://github.com/monoxgas/sRDI

github.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15130531/SAS_CTF_22.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15130557/SAS_CTF_23.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15130624/SAS_CTF_24.png

media.kasperskycontenthub.com

https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2024/10/15130648/SAS_CTF_25.png

media.kasperskycontenthub.com

https://x.com/TheSAScon

x.com