Category: Malware Dev

Malware Dev

Import Address Tables

Hiding IAT entries to evade detection.

Malware Dev

Malicious Nim Code

Using Nim to write some simple tools.

Malware Dev

System Call Execution

Writing a process injection tool using direct system calls.

Malware Dev

ClickOnce Droppers

Creating a ClickOnce installer for Phishing campaigns.

Malware Dev

NT API Shellcode Execution

Process Injection using NtCreateSection and NtMapViewOfSection.

Malware Dev

Access Token Manipulation

Assuming other users identities by copying access tokens.

Malware Dev

Shellcode Execution via Fibers

Using fibers instead of threads to run shellcode.

Malware Dev

Process Argument Spoofing

Modifying the Process Environment Block for process argument spoofing.

Malware Dev

Windows Defender Memory Scanning Evasion

Evading Windows Defender memory scanning.

Malware Dev

Process Injection

CreateRemoteThread Process Injection in C#

Malware Dev

Unhooking Event Tracing for Windows

Bypassing ETW userland hooks.

Malware Dev

Assembly.Load & AMSI

Bypassing AMSI when using Assembly.Load.