Blog - Malware Development

Evading Windows Security : Bypass AMSI

This article explores the Anti-Malware Scan Interface (AMSI), how it works, known bypass techniques, and a novel AMSI bypass method implemented in C# for security research purposes.

AMSI Bypass RedTeam Malware Development Powershell Offensive Security Evasion Detection Bypass CyberSecurity Windows Internals

Offensive Development with C++: Process Injection Part II Practical examples

Exploring three powerful process injection techniques in C++: Self Injection, Remote Injection, and DLL Injection. This post provides a deep dive into each method with practical C++ code examples.

RedTeam Malware Development Offensive Development Win32 API Remote Thread Injection Process Hollowing DLL Injection Process Injection

Understanding PInvoke in C# and the Difference Between Managed and Unmanaged Code

We will explore the concept of PInvoke in C#, the differences between managed and unmanaged code, and provide practical examples to demonstrate how PInvoke can be used effectively in .NET applications.

RedTeam Malware Development Offensive Development PInvoke Managed Code Unmanaged Code Win32 API Interop DotNet Programming In-Memory Execution Shellcode CreateThread

Offensive Development with C++ and C#: Process Injection

The second blog post, I aim to explores various process injection techniques in Windows, including DLL Injection, APC Injection, Process Hollowing, Thread Execution Hijacking, and Inter-Process Mapping, with detailed explanations and advantages. It also includes diagrams to illustrate each method

RedTeam Malware Development Offensive Development Win32 API Remote Thread Injection Process Hollowing DLL Injection Process Injection