SecRat

Windows Exploit Mitigation Technology – Part 2

In Part 1, we explained GS cookies and Safe SEH. If you haven't read that part, it is highly recommended to read it first. The Enhanced Mitigation Experience

Windows Exploit Mitigation Technology – Part 1

The spree of exploits on Windows has led to the creation of a certain type of exploit protection mechanism on Windows. Protection from things like buffer ove

Windows Cryptography API

Microsoft Windows provides a sleek API for cryptographic purposes. It is a generic interface for accessing cryptographic services provided by Microsoft Windo

Advanced sqlmap

sqlmap is an attack tool which can be effectively used to perform SQL injection attacks and post exploitation acts. It is a versatile tool when it comes to S

Extending Debuggers

Sometimes we come across situations when we are in need of doing something inside our debuggers or to extend the functionality of them. For such things, debu

API hooking

API hooking is a technique by which we can instrument and modify the behavior and flow of API calls. API hooking can be done using various methods on Windows

Debugging TLS callbacks

TLS (thread local storage) calls are subroutines that are executed before the entry point . There is a section in the PE header that describes the place of a