Skip to content
Advanced Module Stomping & Heap/Stack Encryption
labs.cognisys.group | blog | #windows | #red-team | #memory-encryption | #evasion | #shellcode | #module-stomping
Summary
Stealthy loader tradecraft: encrypting heap allocations and thread stacks while sleeping, and reverting a stomped module to its original content, implemented in a stager shellcode tasks loader.
- Published
- Collected