Sabotage Sec

Tag: c++

October 19, 2024

I hate you COM – Pitfalls of COM object activation

Background This is not a Windows COM 101, readers are expected to have a decent understanding of COM and CLR hosting internals Dotnet unamanged-api is not a stranger to Offssec tool developers, it enables developers to tinker with managed processes and the CLR itself from within a native process(say c/c++). You can see the whole…

Offensive Coding

.Net, c++, CLR, COM, Common Language Runtime, Component Object Model, cyber security, dotnet, Malware, programming, Red Team, Windows
September 3, 2023

Stack Manipulation via Hardware breakpoint & Direct Syscall Execution

x86 Stack Primer In this section we will quickly go over x86 stack working. The scenario is main() calls function A(), then A() calls B(). Lets see how this affects the stack. The above image is very generic in nature and calling convention is not taken into consideration. Process Overview Spoofing return address Below image…

Offensive Coding

c++, cyber security, Malware, redteam, return address spoofing, spoofing, threat research, Windows