#Tutorial
3 posts
Devirtualizing Tigress Challenge 0 with Triton
Virtualization Obfuscation Virtualization obfuscation is designed to make static analysis boring, noisy, and slow. Instead of compiling logic directly into normal machine code, an obfuscator translates it into bytecode …
How to Convert EXEs to DLLs: PE Internals and Practical Steps
If you’ve worked with Windows applications, you’re likely familiar with EXE (executable) and DLL (dynamic link library) files. While these file types serve different purposes, they share a common underlying structure …
Low-Level Interception: A Guide to Windows NT API Hooking
The Windows NT API is the lowest level of user-mode interaction with the operating system. While most developers use the Win32 API (CreateFile, ReadFile), these functions are ultimately wrappers around the underlying NT …