SLE(A)PING Issues: SWAPPALA and Reflective DLL Friends Forever :: Vincenzo — Blog
oldboy21.github.io
Here we go again, hello everyone! Sorry I am on a roll this period, can’t really sle(a)p well when I have something still to solve and I had some leftovers from the previous SWAPPALA adventure. What we going to talk about today? Well, lots of failures but with a bright end after all. As mentioned in the last episode I wanted to grant the Reflective DLL I worked on with SWAPPALA super powers.
The original post: /r/blueteamsec by /u/digicat on 2024-06-05 09:39:02.

Original Title: SLE(A)PING Issues: SWAPPALA and Reflective DLL Friends Forever - In-memory sleeping technique using threads created in suspended state and timers that work with the ResumeThread function after context is set for execution. Each workers has its own stack etc.