deroko retweeted
x86 finds its way into your iPhone lcq2.github.io/x86_iphone/
deroko retweeted
After years of living under a rock, I decided to start blogging. My first article is about system call dispatching for Windows on ARM64. gracefulbits.com/2018/07/26/…
deroko retweeted
The decay of the IT industry - ntcore.com/?p=488
deroko retweeted
Time Travel: Running Python 3.7 on XP - ntcore.com/?p=458
ActivationContext hook - github.com/deroko/activation… inject dll into child process, not very practical but fun to play with :)
ActivationContext dumper - github.com/deroko/activation… tool to display all informations held in ActivationContext.
deroko retweeted
New blogpost by @0vercl0k "Binary Rewriting With Syzygy, Pt. I" doar-e.github.io/blog/2017/0…
deroko retweeted
APC for the Win source code - github.com/stolenbytes/apcfo…
deroko retweeted
APC for the Win article is up : stolenbytes.com/?p=32 use APC only to inject code into remote process. No other API is used/required
deroko retweeted
WannaCry: Untold story is up : stolenbytes.com/?p=118 Article explains what KillSwitch actually is.
deroko retweeted
Have you ever wondered what are those long hashes in WinSXS folder? Well not anymore : stolenbytes.com/?p=177
EMET on Windows 10 Insider aka PayloadRestrictions.dll and how it is loaded into a process : github.com/deroko/payloadres…
deroko retweeted
Jailbroken iOS + iOS Debugserver + IDA Pro + SSH client youtube.com/watch?v=m44GIIK0…







