#NTDLL - Twitter Hashtag

Smukx.E

@5mukx

over 2 years ago

There are so much rabbit holes that you can see while you are using ntdll on Rust 💀. #ntdll #rustlang #redteaming

0

7

1

0

420

OtterHacker @OtterHacker

almost 3 years ago

#Reversing the #NTDLL is really interesting, I see several data structures or algorithms I only used in school. I rediscovered fast sorting algorithm, red and black binary trees, dichotomy and even what I think was #Dijkstra algorithm.

OtterHacker's tweet photo. #Reversing the #NTDLL is really interesting, I see several data structures or algorithms I only used in school.
I rediscovered fast sorting algorithm, red and black binary trees, dichotomy and even what I think was #Dijkstra algorithm. https://t.co/htJ4cbXKBe

2

56

2

12

6K

Soumyani1 @reveng007

over 3 years ago

Updated my previous week's project! It now has the capability to map Ntdll shellcode into memory and uses it's EAT to get the address of the exported Nt functions required for self PI. github: https://t.co/BeU0HySDox Thanks again: @D1rkMtr @Jean_Maes_1994 #REFLECTION #ntdll

0

27

3

4

2K

💻🥷 WarthogTK 🩺 @warthogtk

almost 4 years ago

Windows Internals : Understand System Service Descriptor Table or #SSDT #windowsInternals #ntdll #win32api https://t.co/fqoHq7GFkc

0

1

2

1

0

SentinelOne @SentinelOne

about 6 years ago

🔥 Read how we discovered and exploited several severe flaws in a security product's kernel mode driver due to a lack of user mode input validation. By @kasifdekel & Roy Ronen https://t.co/D7V9Y5CmuT #security #cybersecurity #cloud #kernel #NTDLL #callbacks #infosec

0

8

6

1

0

Security Boulevard

@securityblvd

about 7 years ago

Agent Tesla: Evading EDR by Removing API Hooks ... by Ratnesh Pandey #agenttesla #api #edr #hooking #ntdll.dll https://t.co/aqeB9tgknJ

0

2

0

Malwrologist

@DissectMalware

about 8 years ago

Can you end filename with a space in Windows? What about only space? Yes/No? both N: with Win shell applications (e.g. cmd/win explorer), you cannot (trailing space is first removed, then file is open) Y: with native Win functions #ntdll, you can Src: https://t.co/GdNRkyXhsq

2

92

46

5

0

SentinelOne @SentinelOne

over 8 years ago

https://t.co/dHAtIDT9A2 1st in a 3 post series describing the challenges one has to overcome when trying to hook the native #NTDLL in #WoW64 applications, By Yarden Shafir and Assaf Carlsbad #windev #wininternals #hooks

0

4

5

0