Skip to content

Commit

Permalink
added blogpost link
Browse files Browse the repository at this point in the history
  • Loading branch information
xuanxuan0 committed May 6, 2021
1 parent 2908f5e commit 0c25b54
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Expand Up @@ -18,7 +18,7 @@ Evasive shellcode loader for bypassing event-based injection detection, without
- Overwrites prologue of one `ntdll` function in the remote process memory space with a `jmp` to our base
- Drops a thread on that trampoline

I'll explain the thinking behind each step in a blog post coming end of the week.
I'll explain some of the thinking here: https://blog.redbluepurple.io/offensive-research/bypassing-injection-detection

## And so
- It's able to fully bypass many EDR injection detections, including Defender ATP.
Expand Down

0 comments on commit 0c25b54

Please sign in to comment.