😈 [ db @whokilleddb ]
Just checking in: Has anyone talked about using LdrCallEnclave() to run shellcode before?
Technically you can also use CallEnclave() from Vertdll.dll or LdrpIssueEnclaveCall() from Ntdll.dll if you are about that unexported-function life.
PoC:
🔗 https://gist.github.com/whokilleddb/ef1f8c33947f6ceb90664ce38d3dcf04
🐥 [ tweet ]
Post #3017
6.65K
- 🔥 4
- 🤔 3