Abusing Exceptions for Code Execution, Part 1

A common offensive technique used by operators and malware developers alike has been to execute malicious code at runtime to avoid static detection. Often, methods of achieving runtime execution have focused on placing arbitrary code into executable memory that can then be executed. In this article, we will explore a
A common offensive technique used by operators and malware developers alike has been to execute malicious code at runtime to avoid static detection. Often, methods of achieving runtime execution have focused on placing arbitrary code into executable memory that can then be executed. In this article, we will explore a new approach to executing runtime code that does not rely on finding executable regions of memory, but instead relies on abusing existing trusted memory to execute arbitrary code.

Why the C Programming Language Still Runs the World

Hunting for Suspicious Windows Libraries for Execution and Defense Evasion — Elastic Security Labs

Detecting anomalous Vectored Exception Handlers on Windows, NCC Group Research Blog

Patching Perforce perforations: Critical RCE vulnerability discovered in Perforce Helix Core Server

Cloud DNS Security - How to protect DNS in the Cloud – Sysdig

10 Common Web Security Vulnerabilities

Remote Code Execution (RCE), Code Injection, Learn AppSec

We believe urinary health should be proactive, but life happens. That’s why we created the UTI Emergency Kit. , This 3-in-1 bundle contains everything

UTI Emergency Kit

The UTI Emergency Kit