The .NET Export Portal « Back to home A while back I published a post looking at how... 2020-11-24 18:10:00 | 阅读: 229 | 收藏 | blog.xpnsec.com vtable cor cordllmain unmanaged vtablefixup

We Need To Talk About MACL « Back to home If you've never heard of MACL on MacOS, you're... 2020-10-19 01:24:00 | 阅读: 222 | 收藏 | blog.xpnsec.com macl dialog xpn jail consume

MacOS Injection via Third Party Frameworks « Back to home Since joining the TrustedSec AETR team, I have... 2020-09-23 09:05:59 | 阅读: 249 | 收藏 | blog.xpnsec.com memory hardened ssendheader powershell injection

Debugging into .NET « Back to home .NET for post-exploitation is here to stay. It... 2020-08-10 10:00:00 | 阅读: 315 | 收藏 | blog.xpnsec.com debugger inject pappdomain stepper

Hiding your .NET - COMPlus_ETWEnabled « Back to home The process of disabling ETW is something that... 2020-06-06 09:04:30 | 阅读: 453 | 收藏 | blog.xpnsec.com etw complus etwenabled coreclr

Designing The Adversary Simulation Lab « Back to home As some of you will know, we have recently ente... 2020-04-18 22:31:06 | 阅读: 183 | 收藏 | blog.xpnsec.com vpc dsc subnet ssm windows

Linux ptrace introduction AKA injecting into sshd for fun - XPN InfoSec Blog « Back to home If there is one thing I've come to appreciate o... 2020-03-29 19:10:09 | 阅读: 808 | 收藏 | blog.xpnsec.com sshd dlopen library memory inject

Hiding your .NET - ETW « Back to home After the introduction of Powershell detection... 2020-03-18 08:57:20 | 阅读: 444 | 收藏 | blog.xpnsec.com etw traceprop sharphound malicious eventheader

AWS Lambda Redirector « Back to home A while back I posted a tweet showing AWS Lambd... 2020-02-25 21:09:00 | 阅读: 417 | 收藏 | blog.xpnsec.com teamserver ngrok beacon stage c2

Protecting Your Malware with blockdlls and ACG « Back to home In an update to Cobalt Strike, the blockdlls co... 2019-11-04 18:42:45 | 阅读: 415 | 收藏 | blog.xpnsec.com processes microsoft cobalt blockdlls memory

XPN InfoSec Blog « Back to home... 2019-02-26 00:47:36 | 阅读: 483 | 收藏 | blog.xpnsec.com c2 beacon externalc2 client filebytes

XPN InfoSec Blog « Back to home... 2019-02-26 00:45:06 | 阅读: 418 | 收藏 | blog.xpnsec.com pml4 memory pdpt ipdpt referencing

XPN InfoSec Blog « Back to home... 2019-02-26 00:44:44 | 阅读: 427 | 收藏 | blog.xpnsec.com cpio victim download payload

XPN InfoSec Blog « Back to home... 2019-02-26 00:43:48 | 阅读: 483 | 收藏 | blog.xpnsec.com dllexport testmethod windows loaded unmanaged

XPN InfoSec Blog « Back to home... 2019-02-26 00:42:35 | 阅读: 542 | 收藏 | blog.xpnsec.com spoofing