DemonLdr
ArchivedA proof-of-concept user-defined reflective loader for the Havoc Framework, built with the Crystal Palace linker.
No posts published yet.
A proof-of-concept user-defined reflective loader for the Havoc Framework, built with the Crystal Palace linker.
Runs .NET assemblies and captures their output using a position-independent execute-assembly implementation built with Crystal Palace.
Reimplementing Havoc Pro Runtime Channel Switching and Cobalt Strike UDC2 features.
Explores how EDR kernel drivers load DLLs into user-mode processes during process initialization.