Skip to content

Commit 2bd18c0

Browse files
committed
Early Exception Handler
Create our own Exception handler to bypass userland EDR hooks
1 parent a08c349 commit 2bd18c0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

KiUserExceptionDispatcherStepOver/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ So to avoid detection, we can develop our own exception handler without relying
1313

1414
To know more about this, the Example poc has been described in detail in this blog: [Early Exception Handling](https://kr0tt.github.io/posts/early-exception-handling/)
1515

16-
> Note: Please note that this poc uses hardcoded SSN just for demonstration of the PoC. in your practices you can extract and use SSN using syscall techniques using Hells/halos/tartarus gate: For Syscall technique you can visit this seciton: [Indirect Syscall]()
16+
> Note: Please note that this poc uses hardcoded SSN just for demonstration of the PoC. in your practices you can extract and use SSN using syscall techniques using Hells/halos/tartarus gate: For Syscall technique you can visit this seciton: [Syscalls](https://github.com/Whitecat18/Rust-for-Malware-Development/tree/main/syscalls)
1717
1818
## PoC
1919

0 commit comments

Comments
 (0)