2 docs tagged with "shellcode"

Reversing a multi-stage dropper: XOR-encrypted stage-1, reflective PE loader, final shellcode execution.

Writing position-independent shellcode in x64 NASM: PEB walking, API hashing, and avoiding null bytes.