corpus.blog
41554 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a0da4f-9e6b-73a9-a38f-2c843047804a

modexp

modexp.wordpress.com · published 9 July 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at modexp.wordpress.com Wayback capture
2blogs citing
First cited
17 Jan 2021
Most recent
6 Jul 2026
Rank this month
not ranked
Links from this post
180
Words captured
24,937

Cited by

Blog
In the post
Date
SensePost
Process Parameter Poisoning Read at the source ↗
6 Jul 2026
Shellsharks
Infosec Blogs: Our Cup Runneth Over Read at the source ↗
17 Jan 2021

Links from this post

Link
Host
Shellcode: Windows on ARM64 / AArch64 Read at the source ↗
modexp.wordpress.com
https://en.wikipedia.org/wiki/Windows_RT
en.wikipedia.org
https://www.pcworld.com/article/452173/microsoft-offers-free-touch-or-type-covers-with-surface-rt-tablet-purchase.html
pcworld.com
https://www.theregister.com/2013/01/07/windows_rt_security_hacked/
theregister.com
https://devblogs.microsoft.com/visualstudio/arm64-visual-studio-is-officially-here/
devblogs.microsoft.com
https://visualstudio.microsoft.com/vs/
visualstudio.microsoft.com
https://github.com/mstorsjo/llvm-mingw
github.com
https://github.com/tgrysztar/fasmg
github.com
https://learn.microsoft.com/en-us/cpp/assembler/arm/arm-assembler-command-line-reference
learn.microsoft.com
https://flatassembler.net/docs.php?article=fasmg
flatassembler.net
https://x.com/grysztar
x.com
https://board.flatassembler.net/topic.php?t=20097
board.flatassembler.net
https://github.com/lantonov/asmFish/tree/master/arm/include/instructions
github.com
https://board.flatassembler.net/topic.php?t=22444
board.flatassembler.net
https://github.com/tgrysztar/fasmg/blob/master/packages/utility/struct.inc
github.com
https://en.wikipedia.org/wiki/Turbo_Assembler
en.wikipedia.org
https://en.wikipedia.org/wiki/Microsoft_Macro_Assembler
en.wikipedia.org
https://learn.microsoft.com/en-us/windows/win32/api/objidl/nn-objidl-istream
learn.microsoft.com
https://github.com/tgrysztar/fasmg/blob/master/packages/x86/include/macro/com64.inc
github.com
Shellcode: Loading .NET Assemblies From Memory Read at the source ↗
modexp.wordpress.com
https://board.flatassembler.net/topic.php?t=21859
board.flatassembler.net
https://learn.microsoft.com/en-us/previous-versions/windows/internet-explorer/ie-developer/platform-apis/ms775127(v=vs.85
learn.microsoft.com
https://www.youtube.com/watch?v=aZSkFL4ZXKk
youtube.com
https://github.com/FFRI/ProjectChameleon
github.com
https://i.blackhat.com/eu-20/Wednesday/eu-20-Nakagawa-Jack-In-The-Cache-A-New-Code-Injection-Technique-Through-Modifying-X86-To-Arm-Translation-Cache.pdf
i.blackhat.com
https://gracefulbits.wordpress.com/2018/07/26/system-call-dispatching-for-windows-on-arm64/
gracefulbits.wordpress.com
Running x64 on Windows 10 ARM64: How the heck does that work? Read at the source ↗
oofhours.com
https://blogs.blackberry.com/en/2019/09/teardown-windows-10-on-arm-x86-emulation
blogs.blackberry.com
https://gist.github.com/wdormann/bbf95c5ccebb826a1e21124cfb320106
gist.github.com
WoW64 internals Read at the source ↗
wbenny.github.io
Delegated NT DLL Read at the source ↗
modexp.wordpress.com
https://twitter.com/real_redp
twitter.com
https://twitter.com/Hexacorn
twitter.com
WOW64 Callback Table (FinFisher) Read at the source ↗
modexp.wordpress.com
https://redplait.blogspot.com/2017/07/delegatedntdll.html
redplait.blogspot.com
https://www.hexacorn.com/blog/2018/09/04/beyond-good-ol-run-key-part-87/
hexacorn.com
https://gist.github.com/odzhan/d677d9d5b6b31d8cabf9277bc14a3856
gist.github.com
https://modexp.wordpress.com/category/windows/data-structures-windows/
modexp.wordpress.com
https://modexp.wordpress.com/category/security/
modexp.wordpress.com
https://modexp.wordpress.com/category/windows/
modexp.wordpress.com
https://modexp.wordpress.com/tag/amd64/
modexp.wordpress.com
https://modexp.wordpress.com/tag/arm64/
modexp.wordpress.com
https://modexp.wordpress.com/tag/hacking/
modexp.wordpress.com
https://modexp.wordpress.com/tag/internals/
modexp.wordpress.com
https://modexp.wordpress.com/tag/shellcode/
modexp.wordpress.com
https://modexp.wordpress.com/tag/structures/
modexp.wordpress.com
https://modexp.wordpress.com/tag/windows/
modexp.wordpress.com
https://modexp.wordpress.com/tag/x64/
modexp.wordpress.com
https://modexp.wordpress.com/tag/x86/
modexp.wordpress.com
http://www.nynaeve.net/?p=201
nynaeve.net
http://www.rohitab.com/discuss/topic/43044-heavens-gate-with-bypass-load-64-bit-modules-into-32-bit-process/
rohitab.com
https://ling.re/hardware-breakpoints/
ling.re
https://www.microsoft.com/en-us/security/blog/2018/03/01/finfisher-exposed-a-researchers-tale-of-defeating-traps-tricks-and-complex-virtual-machines/
microsoft.com
https://gist.github.com/odzhan/b4898fa96f36b131973f62b797c4f639
gist.github.com
Shellcode: Linux on RISC-V 64-Bit Read at the source ↗
modexp.wordpress.com
https://riscv.org/technical/specifications/
riscv.org
https://shop.allnetchina.cn/products/starfive-visionfive-ai-single-board-computer
shop.allnetchina.cn
https://developer.arm.com/Processors/Cortex-A55
developer.arm.com
https://www.qemu.org/docs/master/system/target-riscv.html
qemu.org
https://github.com/odzhan/shellcode/tree/master/os/linux/riscv64
github.com
https://thomask.sdf.org/blog/2018/08/25/basic-shellcode-in-riscv-linux.html
thomask.sdf.org
https://www.usenix.org/system/files/woot19-paper_barral.pdf
usenix.org
https://matshao.com/2020/05/18/DEFCON-2020-Quals-nooopsled/
matshao.com
https://github.com/TheThirdOne/rars
github.com
Windows Process Injection: Command Line and Environment Variables Read at the source ↗
modexp.wordpress.com
https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualallocex
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-writeprocessmemory
docs.microsoft.com
https://www.hexacorn.com/blog/2019/05/18/inserting-data-into-other-processes-address-space/
hexacorn.com
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-createprocessw
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/memoryapi/nf-memoryapi-virtualprotectex
docs.microsoft.com
https://www.hexacorn.com/blog/2019/04/23/wordwarper-new-code-injection-trick/
hexacorn.com
https://docs.microsoft.com/en-us/windows/win32/controls/em-setwordbreakproc
docs.microsoft.com
https://www.vergiliusproject.com/kernels/x64/Windows%20Vista%20%7C%202008/RTM/_RTL_USER_PROCESS_PARAMETERS
vergiliusproject.com
https://github.com/odzhan/injection/blob/master/cmdline/winexec1.asm
github.com
https://docs.microsoft.com/en-us/windows/win32/winmsg/wm-settext
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/winbase/nf-winbase-setenvironmentvariable
docs.microsoft.com
https://github.com/odzhan/injection/tree/master/cmdline
github.com
https://docs.microsoft.com/en-us/windows/win32/api/processthreadsapi/ns-processthreadsapi-startupinfow
docs.microsoft.com
https://modexp.wordpress.com/category/assembly/
modexp.wordpress.com
https://modexp.wordpress.com/category/injection/
modexp.wordpress.com
https://modexp.wordpress.com/category/malware/
modexp.wordpress.com
https://modexp.wordpress.com/category/process-injection/
modexp.wordpress.com
https://modexp.wordpress.com/category/programming/
modexp.wordpress.com
https://modexp.wordpress.com/category/redteam/
modexp.wordpress.com
https://modexp.wordpress.com/category/shellcode/
modexp.wordpress.com
https://modexp.wordpress.com/tag/command-line/
modexp.wordpress.com
https://modexp.wordpress.com/tag/environment-variables/
modexp.wordpress.com
https://modexp.wordpress.com/tag/peb/
modexp.wordpress.com
https://modexp.wordpress.com/tag/windows-process-injection/
modexp.wordpress.com
MiniDumpWriteDump via COM+ Services DLL Read at the source ↗
modexp.wordpress.com
https://doc.lagout.org/science/0_Computer%20Science/9_Others/9_Misc/Memory%20Dump%20Analysis%20Anthology%2C%20Volume%201.pdf
doc.lagout.org
https://twitter.com/DumpAnalysis
twitter.com
https://docs.microsoft.com/en-us/windows/win32/api/minidumpapiset/nf-minidumpapiset-minidumpwritedump
docs.microsoft.com
Windows Process Injection: Breaking BaDDEr Read at the source ↗
modexp.wordpress.com
https://docs.microsoft.com/en-us/windows/win32/dataxchg/about-dynamic-data-exchange
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/dataxchg/dynamic-data-exchange-management-library
docs.microsoft.com
https://docs.microsoft.com/en-us/security-updates/securityadvisories/2017/4053440
docs.microsoft.com
https://github.com/odzhan/injection/tree/master/dde
github.com
Shellcode: In-Memory Execution of JavaScript, VBScript, JScript and XSL Read at the source ↗
modexp.wordpress.com
http://www.drdobbs.com/a-dynacall-function-for-win32/184416502
drdobbs.com
http://www.drdobbs.com/windows/an-automation-object-for-dynamic-dll-cal/210200078
drdobbs.com
https://twitter.com/blair_strang
twitter.com
https://web.archive.org/web/20110921221342/http://dev.metasploit.com/redmine/issues/3894
web.archive.org
http://dynwrapx.script-coding.com/dwx/pages/dynwrapx.php?lang=en
dynwrapx.script-coding.com
https://web.archive.org/web/20160913080156/http://subt0x10.blogspot.com/2016/09/shellcode-via-jscript-vbscript.html
web.archive.org
https://twitter.com/subtee
twitter.com
https://www.microsoft.com/security/blog/2019/07/01/delivering-major-enhancements-in-windows-defender-application-control-with-the-windows-10-may-2019-update/
microsoft.com
https://www.virusbulletin.com/conference/vb2007/abstracts/last-minute-presentation-novel-code-obfuscation-com/
virusbulletin.com
https://docs.microsoft.com/en-us/scripting/winscript/reference/iactivescript
docs.microsoft.com
https://docs.microsoft.com/en-us/previous-versions/iis/6.0-sdk/ms526064(v=vs.90
docs.microsoft.com
http://web.archive.org/web/20060320163550/http://www.mindspring.com/~mark_baker/toc.htm
web.archive.org
https://docs.microsoft.com/en-us/windows/win32/com/the-component-categories-manager
docs.microsoft.com
https://gist.github.com/odzhan/5a96d6ebe16dd69c4813f99411b46d0a
gist.github.com
https://www.activestate.com/
activestate.com
https://www.codeproject.com/Articles/14905/COM-in-plain-C-Part-6
codeproject.com
https://gist.github.com/odzhan/d18145b9538a3653be2f9a580b53b063
gist.github.com
https://github.com/odzhan/shellcode/blob/master/os/win/x86/inmem/ax.asm
github.com
https://geidav.wordpress.com/tag/stack-probing/
geidav.wordpress.com
https://docs.microsoft.com/en-us/cpp/build/reference/gs-control-stack-checking-calls?view=vs-2019
docs.microsoft.com
https://docs.microsoft.com/en-us/previous-versions//at5ydy31%28v%3dvs.85%29
docs.microsoft.com
https://docs.microsoft.com/en-us/previous-versions//fw0fx1aw%28v%3dvs.85%29
docs.microsoft.com
https://docs.microsoft.com/en-us/previous-versions//6t81adfd%28v%3dvs.85%29
docs.microsoft.com
https://github.com/bitsadmin/revbshell
github.com
https://github.com/TheWover/donut/blob/dev/payload/activescript.c
github.com
https://docs.microsoft.com/en-us/scripting/winscript/reference/iactivescript-addnameditem
docs.microsoft.com
https://www.benf.org/other/olewoo/index.html
benf.org
https://docs.microsoft.com/en-us/scripting/winscript/reference/iactivescriptsite-getiteminfo
docs.microsoft.com
https://github.com/TheWover/donut/blob/dev/payload/wscript.c
github.com
https://gist.github.com/odzhan/3ed55e3a9cbcdc3e2fa84073fc1adf4c
gist.github.com
https://gist.github.com/TheWover/3cdf0c33e7c1f40d0bac8c97d7523bcb
gist.github.com
https://twitter.com/therealwover
twitter.com
https://kobyk.wordpress.com/2007/09/13/a-lightweight-approach-for-exposing-c-objects-to-a-hosted-active-scripting-engine/
kobyk.wordpress.com
https://docs.microsoft.com/en-us/windows/win32/api/oleauto/nf-oleauto-createdisptypeinfo
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/win32/api/oleauto/nf-oleauto-createstddispatch
docs.microsoft.com
https://github.com/TheWover/donut
github.com
https://modexp.wordpress.com/tag/assembly/
modexp.wordpress.com
https://modexp.wordpress.com/tag/javascript/
modexp.wordpress.com
https://modexp.wordpress.com/tag/jscript/
modexp.wordpress.com
https://modexp.wordpress.com/tag/perl/
modexp.wordpress.com
https://modexp.wordpress.com/tag/python/
modexp.wordpress.com
https://modexp.wordpress.com/tag/vbscript/
modexp.wordpress.com
Shellcode: In-Memory Execution of DLL Read at the source ↗
modexp.wordpress.com
https://github.com/odzhan/shellcode/blob/master/os/win/x86/inmem/29A-6.010
github.com
https://github.com/odzhan/shellcode/tree/master/os/win/x86/inmem
github.com
https://docs.microsoft.com/en-us/windows/desktop/AMSI/antimalware-scan-interface-portal
docs.microsoft.com
https://www.fireeye.com/blog/threat-research/2016/02/greater_visibilityt.html
fireeye.com
https://github.com/TheWover/
github.com
https://thewover.github.io/Introducing-Donut/
thewover.github.io
https://docs.microsoft.com/en-us/dotnet/framework/unmanaged-api/hosting/icorruntimehost-interface
docs.microsoft.com
https://docs.microsoft.com/en-us/dotnet/framework/unmanaged-api/hosting/iclrruntimehost-interface
docs.microsoft.com
https://docs.microsoft.com/en-us/dotnet/framework/unmanaged-api/hosting/iclrmetahost-interface
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/combaseapi/nf-combaseapi-coinitializeex
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/combaseapi/nf-combaseapi-cocreateinstance
docs.microsoft.com
https://docs.microsoft.com/en-us/dotnet/framework/unmanaged-api/hosting/corbindtoruntime-function
docs.microsoft.com
https://docs.microsoft.com/en-us/dotnet/framework/unmanaged-api/hosting/corbindtoruntimeex-function
docs.microsoft.com
https://docs.microsoft.com/en-us/dotnet/framework/unmanaged-api/hosting/clrcreateinstance-function
docs.microsoft.com
https://docs.microsoft.com/en-us/dotnet/framework/unmanaged-api/hosting/iclrruntimeinfo-interface
docs.microsoft.com
https://github.com/caseysmithrc/AssemblyLoader
github.com
https://docs.microsoft.com/en-us/windows/desktop/api/oleauto/nf-oleauto-loadtypelib
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/oaidl/nn-oaidl-itypelib
docs.microsoft.com
https://docs.microsoft.com/en-us/windows/desktop/api/oaidl/nn-oaidl-itypeinfo
docs.microsoft.com
http://www.benf.org/other/olewoo/index.html
benf.org
https://github.com/embedthis/phplib/blob/master/ext/com_dotnet/com_dotnet.c
github.com
https://github.com/TheWover/donut/blob/master/payload/payload.h
github.com
https://github.com/fireeye/flare-floss
github.com
https://docs.microsoft.com/en-us/windows/desktop/api/wincrypt/nf-wincrypt-cryptgenrandom
docs.microsoft.com
https://www.2uo.de/myths-about-urandom
2uo.de
https://github.com/TheWover/donut/blob/master/donut.c
github.com
https://stackoverflow.com/a/27459196
stackoverflow.com
https://tinycrypt.wordpress.com/2017/01/11/asmcodes-noekeon/
tinycrypt.wordpress.com
https://mouha.be/chaskey/
mouha.be
https://eprint.iacr.org/2015/968
eprint.iacr.org
https://modexp.wordpress.com/2017/08/05/shellcode-maru-hash/
modexp.wordpress.com
https://modexp.wordpress.com/category/encryption/
modexp.wordpress.com
https://modexp.wordpress.com/tag/net/
modexp.wordpress.com
https://modexp.wordpress.com/tag/c/
modexp.wordpress.com
https://modexp.wordpress.com/tag/donut/
modexp.wordpress.com
https://modexp.wordpress.com/tag/dotnet/
modexp.wordpress.com
https://modexp.wordpress.com/tag/powershell/
modexp.wordpress.com
https://www.unknowncheats.me/forum/2699465-post6033.html
unknowncheats.me