APC325 EarlyBird APC Injection: A Deep Technical Analysis
The EarlyBird APC technique creates a trusted process in a suspended state, allocates memory for shellcode, and writes the payload. It then…
oxfemale·
Feb 13·
6 min
·325
// winapi
40 postsAPC325 
Containers410 Securely Embedding WASM Plugins in Your Project
libraries for packaging, verifying, decrypting, and executing WebAssembly plugins packaged in a custom container format .mylib (version 2).
oxfemale·
Feb 2·
2 min
·410
cpp582 Exploring Protected Process Light and Exploits
Red team technique—process injection—and how to leverage it against Protected Process Light (PPL)
oxfemale·
Feb 2·
28 min
·582
winapi354 The Definitive Guide To Process Cloning on Windows
Original text by DENIS NAGAYUK & FRANCISCO DOMINGUEZ This article aims to provide the reader with a comprehensive guide to the technical details and…
oxfemale·
Nov 26·
28 min
·354