Nigerald's Blog

Authors: Dylan Tran and Jimmy Bayne (@bohops)Disclaimer: This post was originally published on the IBM Security Blog and has been mirrored here. [Read More]

In my last blog post I talked about stack spoofing, a technique used to hide the origin of an API call so as to not point back to our implant in memory. The implementation I went over is a trade-off; at a glance, the stack is clean, but in reality,... [Read More]

Authors: Bobby Cooke (@0xboku) and Dylan TranDisclaimer: This post was originally published on the IBM Security Blog and has been mirrored here. [Read More]

Stack spoofing is a really cool malware technique that isn’t new, but has been receving some more attention recently. The goal of this post is to introduce readers to the concept and dive into two implementations. This post will focus only on call stack spoofing in x64 Windows with “active”... [Read More]

Sleep obfuscation is a really cool technique that has been around for a bit now. I spent the past few months digging into it and C. As defensive software has become more capable, along with defensive proof of concepts become more advanced, so must the techniques we implement into our... [Read More]