Abusing Exceptions for Code Execution, Part 1

A common offensive technique used by operators and malware developers alike has been to execute malicious code at runtime to avoid static detection. Often, methods of achieving runtime execution have focused on placing arbitrary code into executable memory that can then be executed. In this article, we will explore a
A common offensive technique used by operators and malware developers alike has been to execute malicious code at runtime to avoid static detection. Often, methods of achieving runtime execution have focused on placing arbitrary code into executable memory that can then be executed. In this article, we will explore a new approach to executing runtime code that does not rely on finding executable regions of memory, but instead relies on abusing existing trusted memory to execute arbitrary code.

GitHub - D4stiny/ExceptionOrientedProgramming: Abusing exceptions for code execution.

Abusing Exceptions for Code Execution, Part 1

Abusing Exceptions for Code Execution, Part 2

CVE-2021-31956 Exploiting the Windows Kernel (NTFS with WNF) – Part 2, NCC Group Research Blog

For a Better Life: Migrant Worker Abuse in Bahrain and the Government Reform Agenda

Detecting anomalous Vectored Exception Handlers on Windows, NCC Group Research Blog

Project Zero: Injecting Code into Windows Protected Processes using COM - Part 2

Trusted Platform Module - Wikipedia

The Top 100 Software Companies of 2023

9 types of computer virus and how they do their dirty work

Opioid Prescribing for Chronic Pain: Case Studies and Best Practices

Abusing Exceptions for Code Execution, Part 1

Abusing Exceptions for Code Execution, Part 2

Remote Code Execution (RCE), Code Injection, Learn AppSec