ae/golfed.xyz
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: ae:f281e10cd26b52fd8439779a4cb762a3ce4e197c
Branches Tags
ae:master
...
compare: ae:17872331b985443d0f8e2f43294ea2fea581e13b
Branches Tags
ae:master

2 Commits
f281e10cd2 ... 17872331b9

Author SHA1 Message Date
ae
17872331b9
update clearsigned contacts 2025-02-18 12:50:56 +02:00
ae
bfa4d6b45c
update srdi post preface snippet 2025-02-17 21:01:09 +02:00
2 changed files with 12 additions and 12 deletions
Show Stats Expand all files Collapse all files

2
content/posts/understanding-srdi.md
View File

@ -7,7 +7,7 @@ tags = ['windows', 'srdi']
categories = ['malware']
+++
In the ever-evolving landscape of malware, Shellcode Reflective DLL Injection (RDI) still stands as a formidable technique despite its age. What differentiates it from traditional DLL injection methods is that it doesn't leave apparent traces to the targeted filesystem, which is why it has a chance to bypass basic defensive solutions relying on behavior monitoring, heuristics, or signature-based detection.
Shellcode reflective DLL injection (sRDI) still stands as a relatively stealthy technique in the Windows malware scene despite its age. What differentiates it from simpler DLL injection methods is that it doesn't leave apparent traces to the targeted system's disk, which is why it has a chance to bypass basic defensive solutions relying on e.g. signature detection.
## Steps

22
static/contact.txt
View File

@ -1,19 +1,19 @@
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Clearweb: golfed.xyz, umbrella.haus
Onion: golfed6fzytoktol4de4o4nerap3xuykhfm5makfzscib65df3khnpyd.onion
PGP: 1530F5132A1228578D2B4168995EFD5C1B532B3E
Email: hello@golfed.xyz
Matrix: @ae:golfed.xyz
Signal: @xmr.02
clearweb: golfed.xyz, umbrella.haus
onion: golfed6fzytoktol4de4o4nerap3xuykhfm5makfzscib65df3khnpyd.onion
pgp: 1530F5132A1228578D2B4168995EFD5C1B532B3E
email: hello at golfed.xyz
matrix: @ae:golfed.xyz
signal: xmr.02
Updated: 29/11/2024
updated: 18/02/2025
-----BEGIN PGP SIGNATURE-----
iHUEARYKAB0WIQQVMPUTKhIoV40rQWiZXv1cG1MrPgUCZ0mHzQAKCRCZXv1cG1Mr
Pl6yAQCjFkLnaCH9f3BQgAsCwpmjmxQzcOsVoptf4eB08ZJNbAD/RH2Suz1CJSWe
LTusruFyxPEbzDsT+jNvebZRY91A5gQ=
=UfKa
iHUEARYKAB0WIQQVMPUTKhIoV40rQWiZXv1cG1MrPgUCZ7RlwwAKCRCZXv1cG1Mr
PvsLAP9v4JZJ1Flj/cwiFhTx5sEAcyD5unLcDKDgjXgymDwZvAD/QKNXwWzhnoHh
tqwdF8C+zMuW4LuwEeUcdCQXx3fQkwQ=
=Eo3p
-----END PGP SIGNATURE-----