Abusing Exceptions for Code Execution, Part 1

A common offensive technique used by operators and malware developers alike has been to execute malicious code at runtime to avoid static detection. Often, methods of achieving runtime execution have focused on placing arbitrary code into executable memory that can then be executed. In this article, we will explore a
A common offensive technique used by operators and malware developers alike has been to execute malicious code at runtime to avoid static detection. Often, methods of achieving runtime execution have focused on placing arbitrary code into executable memory that can then be executed. In this article, we will explore a new approach to executing runtime code that does not rely on finding executable regions of memory, but instead relies on abusing existing trusted memory to execute arbitrary code.

The UTI Emergency Kit

Microsoft Defender Attack Surface Reduction recommendations

Loophole Abuse - TV Tropes

A contractile injection system is required for developmentally regulated cell death in Streptomyces coelicolor

exception processing message 0xc0000005 - unexpected parameters - Microsoft Community

Do Not Abuse Try Except In Python, by Christopher Tao

Abusing Exceptions for Code Execution, Part 1

How Dare They Peep into My Private Life?”: Children's Rights Violations by Governments that Endorsed Online Learning During the Covid-19 Pandemic

Blindside: A New Technique for EDR Evasion with Hardware Breakpoints - Cymulate

Code of Ethics for Government Services Poster

Exploitation Protections From Old To Bleeding Edge pt 1, by Edward Amaral Toledano, stolabs

mTLS: When certificate authentication is done wrong - The GitHub Blog

Hackers Exploit Windows Policy Loophole to Forge Kernel-Mode Driver Signatures

Abusing Exceptions for Code Execution, Part 1

Abusing Exceptions for Code Execution, Part 1