Shellcode: Recycling Compression Algorithms for the Z80, 8088, 6502, 8086, and 68K Architectures. Recycling Compression Algorithms for the Z80, 8088, 6502, 8086, and 68K Architectures.C... 2020-05-27 10:00:16 | 阅读: 165 | 收藏 | modexp.wordpress.com ofs adc hl pushad jnc

Another method of bypassing ETW and Process Injection via ETW registration entries. ContentsIntroductionRegistering ProvidersLocating the Registration TableParsing the Regi... 2020-04-09 03:00:59 | 阅读: 69 | 收藏 | modexp.wordpress.com etw prop ht memory

Shellcode: Data Compression IntroductionThis post examines data compression algorithms suitable for position-independent... 2019-12-09 00:00:26 | 阅读: 75 | 收藏 | modexp.wordpress.com outbuf ums windows outlen inlen

MiniDumpWriteDump via COM+ Services DLL IntroductionThis will be a very quick code-oriented post about a DLL function exported by co... 2019-08-30 19:42:27 | 阅读: 39 | 收藏 | modexp.wordpress.com minidumpw wscript comsvcs dmp

Windows Process Injection: Asynchronous Procedure Call (APC) IntroductionAn early example of APC injection can be found in a 2005 paper by the late Barna... 2019-08-28 03:00:09 | 阅读: 48 | 收藏 | modexp.wordpress.com alertable ht evt te closehandle