Malware – Page 3

Can it Resolve DOOM? Game Engine in 2,000 DNS Records

The article shows a proof-of-concept where DOOM is stored across ~2,000 DNS TXT records and executed directly from memory. A PowerShell loader…

oxfemale· Mar 22· 7 min ·4.1k

Invisible Execution: Hiding Malware with Unwind Metadata Manipulation

BYOUD152

BYOUD EDR

Invisible Execution: Hiding Malware with Unwind Metadata Manipulation

The article introduces BYOUD, a Windows evasion technique that manipulates unwind metadata to spoof call stacks without altering return addresses, allowing malware…

oxfemale· Mar 20· 37 min ·152

Reverse engineering undocumented Windows Kernel features to work with the EDR

Antivirus221

Antivirus Bypassing

Reverse engineering undocumented Windows Kernel features to work with the EDR

This article demonstrates how to reverse engineer the Windows 11 kernel to understand undocumented internals behind memory operations and ETW Threat Intelligence…

oxfemale· Mar 14· 18 min ·221

Malware and cryptography 44 – encrypt/decrypt payload via Discrete Fourier Transform. Simple C example.

cpp111

cpp Cryptography

Malware and cryptography 44 – encrypt/decrypt payload via Discrete Fourier Transform. Simple C example.

Demonstration how malware can encrypt and decrypt payloads using the Discrete Fourier Transform (DFT). It provides a simple C example showing how…

oxfemale· Mar 10· 10 min ·111

// Malware

Can it Resolve DOOM? Game Engine in 2,000 DNS Records

Invisible Execution: Hiding Malware with Unwind Metadata Manipulation

Reverse engineering undocumented Windows Kernel features to work with the EDR

Malware and cryptography 44 – encrypt/decrypt payload via Discrete Fourier Transform. Simple C example.