Abusing Exceptions for Code Execution, Part 1

A common offensive technique used by operators and malware developers alike has been to execute malicious code at runtime to avoid static detection. Often, methods of achieving runtime execution have focused on placing arbitrary code into executable memory that can then be executed. In this article, we will explore a
A common offensive technique used by operators and malware developers alike has been to execute malicious code at runtime to avoid static detection. Often, methods of achieving runtime execution have focused on placing arbitrary code into executable memory that can then be executed. In this article, we will explore a new approach to executing runtime code that does not rely on finding executable regions of memory, but instead relies on abusing existing trusted memory to execute arbitrary code.

9 types of computer virus and how they do their dirty work

Abusing Exceptions for Code Execution, Part 1

User Account Control – Overview and Exploitation

Classification of Web Application Vulnerabilities

101 Landing Page Optimization Tips & Ideas

Evading Windows Defender with 1 Byte Change - Red Team Notes

Experimental and spontaneous metastasis assays can result in divergence in clonal architecture

Abusing Jenkins Groovy Script Console to get Shell, by Nishant Sharma

CVE-2018-8611 Exploiting Windows KTM Part 5/5 – Vulnerability detection and a better read/write primitive, NCC Group Research Blog