Darkside Clone Demo from the webinar

Поделиться
HTML-код
  • Опубликовано: 26 окт 2024

Комментарии • 5

  • @bludablaz
    @bludablaz 6 месяцев назад +1

    Recently took the Rust class. You're genuinely a wizard. Absolutely brilliant work again.

  • @ek2719
    @ek2719 6 месяцев назад +1

    Great content. Plenty to refer to in the future. Thanks!

  • @MarekKnapek
    @MarekKnapek 6 месяцев назад +2

    Nice! I was thinking about C++ constexpr function converting from module name and function name to a hash. Then searching the module list and export list hashing each element and comparing it to pre-computed hashes. This way you hide the strings from anti virus and from offline analyzers. But no, Pavel ecrypted the whole thing. Nice. Possible red flag would be running code that is not mapped to any file (that modified pages after decryption).

  • @tgare8861
    @tgare8861 6 месяцев назад

    Hello, how are you? I want to ask you how to load dll from byte array

    • @zodiacon
      @zodiacon  6 месяцев назад

      This is called Reflective loading. Look it up.