LayeredSyscall – Abusing VEH to Bypass EDRs
https://whiteknightlabs.com/2024/07/31/layeredsyscall-abusing-veh-to-bypass-edrs
#redteam #edr #hook #bypass
Post #2109
5.82K
- Jan 19, 2025New blog on using CLR customizations to improve the OPSEC of your .NET execution harness.…
- Jan 1, 2025Happy New Year! May every binary reveal its secrets, every challenge find its solution, an…
- Nov 15, 2024Complete list of LPE exploits for Windows (starting from 2023) https://github.com/MzHmO/Ex…
- Sep 27, 2024Attacking UNIX Systems via CUPS, Part I CVE-2024-47176, CVE-2024-47076, CVE-2024-47175, an…
- Sep 26, 20240-Click exploit in MediaTek Wi-Fi chipsets affects routers and smartphones / Exploiting (C…
- Sep 3, 2024Native function and Assembly Code Invocation https://research.checkpoint.com/2022/native-f…