lloydlabs

2023年3月3日—Ablogofmyfindingsandresearch.,23yearsold,currentlyworkingatCrowdStrikeasaSecurityResearcher.i'[email protected]·lloydlabsonGitHub;lloydlabson ...,2023年2月20日—ArnaudPAVON'sPost...GitHub-LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection:ThisnovelwayofusingNtQueueApcThreadEx ...,NewResearchProcessInjectionviaNtQueueApcThreadExwithNTDLLROPGadget1.Pickrandompopr...

$~ lloydlabs

2023年3月3日 — A blog of my findings and research.

About

23 years old, currently working at CrowdStrike as a Security Researcher. i'm on the internet. email - [email protected] · lloydlabs on GitHub; lloydlabs on ...

Arnaud PAVON on LinkedIn

2023年2月20日 — Arnaud PAVON's Post ... GitHub - LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection: This novel way of using NtQueueApcThreadEx ...

Lloyd Davies (@LloydLabs) X

New Research Process Injection via NtQueueApcThreadEx with NTDLL ROP Gadget 1. Pick random pop r32; ret gadget within NTDLL 2.

Lloyd Davies LloydLabs

LloydLabs has 14 repositories available. Follow their code on GitHub.

LloydLabsdelete-self

The delete-self-poc is a demonstration of a method to delete a locked executable or currently running file from disk. This concept was initially discovered by ...

Malpedia Library

«First · 1 · »Last. Enter keywords to filter the library entries below or Propose new Entry. 2021-07-03 ⋅ Twitter (@LloydLabs) ⋅ Lloyd ... 2017-11-17 ...

RT @LloydLabs

2023年2月21日 — New Research Process Injection via NtQueueApcThreadEx with NTDLL ROP Gadget 1. Pick random pop r32; ret gadget within NTDLL 2.

Tweet URL

GitHub - LloydLabs/ntqueueapcthreadex-ntdll-gadget-injection: This novel way of using NtQueueApcThreadEx by abusing the ApcRoutine and SystemArgument[0-3] ...