mannyfred/SentinelBruh

Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution

SentinelBruh

Dirty PoC on how to abuse S1's VEH for Vectored Syscalls and Local Execution

Fun with Exception Handlers

Acknowledgements

• @DimitriFourny Dumping VEH on Win10
• @VirtualAllocEx Vectored Syscalls
• @Ollie.Whitehouse Detecting Anomalous VEH Handlers
• @Maldev-Academy (@mrd0x, @NUL0x4C, @Cracked5pider) Maldev Academy
• @l1inear, @0xtriboulet, @kyle41111