Skip to content

Sh3lldon/HellsVectoredGate

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

16 Commits
 
 
 
 
 
 

Repository files navigation

HellsVectoredGate

HellsVectoredGate is a technique that combaines VEH (Vectored Exception Handler)and indirect syscalls allowing the operator to execute native system calls through exception without directly invoking the syscall instruction in a traceable way. You must make specific exceptino (this case uses ACCESS_VIOLATION) so that registered VEH handle it.

Usage

Initializing NTDLL_CONFIG and NT_API structures. Finding SSN of the syscalls and random syscall instruction address:

1

Memory allocation - NtAllocateVirtualMemory

2

Payload writing - NtWriteVirtualMemory

3

New access PAGE_EXECUTE_READ - NtProtectVirtualMemory

4

New thread creation - NtCreateThreadEx

5

NtWaitForSingleObject

6

Final results

7

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published