reveng007 / reflectiventdll

A Dropper POC with a focus on aiding in EDR evasion, NTDLL Unhooking followed by loading ntdll in-memory, which is present as shellcode (using pe2shc by @hasherezade). Payload encryption via SystemFucntion033 NtApi and No new thread via Fiber

Hey there , I'm Soumyanil

---

Check out: https://reveng007.github.io

About Me:

• Hi, I'm Soumyanil (aka reveng007).
• Currently into Security Research. Though I have an electronics background, I am into information security.
• Former Speaker BSides Singapore 2023, Black Hat Asia 2024 Presenter.
• Also got invitation as a speaker from BSides St. Pete (Florida) 2023, BSides Prishtina (Kosovo) 2023/2024, BSides Boise (Idaho) 2024, Hackmiami Conference XI 2024 and ConfidenceConf 2024, Krakow, Poland.
• I'm learning new stuff day in and day out. I'm passionate about offensive security more than defensive.
• I have played CTFs, solved 100+ rooms in TryHackMe till now. I have CRTP.
• Now a day, I am spending most of the time building scripts/open source malware dev evasion based projects, digging deep into windows system internals, building scripts on On-prem and Cloud-based (like, AWS) Attack Vectors.

Languages:

Github Statistics: