Combining Indirect Dynamic Syscalls and API Hashing
labs.cognisys.group | blog | #windows | #red-team | #evasion | #shellcode | #syscalls | #api-hashing
Summary
Loader walkthrough combining API hashing and indirect dynamic syscalls: resolving module and API addresses from the PEB, locating SSNs and finding a syscall instruction to evade userland hooks.
- Published
- Collected
Skip to content