Malware Development
⌘Ctrlk
Malware Development
  • Golang Malware Development
    • Golang Programming Intro
    • Shellcode Injection
    • DLL Injection
    • Payloads
    • Shellcode development
    • AV Bypass
    • EDR Bypass
      • 1. Setting up a testing environment
      • 2. Userland Hooks
        • 1. What are userland hooks?
        • 2. Load a fresh copy of the dll from disk
        • 3. Programmatically detect ntdll hooks
        • 4. Direct and Indirect Syscalls (shellcode runner)
      • 3. VPN abuse for Endpoint Protection Evasion
Powered by GitBook
For the complete documentation index, see llms.txt. This page is also available as Markdown.
  1. Evasion
  2. EDR Bypass

2. Userland Hooks

1. What are userland hooks?2. Load a fresh copy of the dll from disk3. Programmatically detect ntdll hooks4. Direct and Indirect Syscalls (shellcode runner)