Kudaes/Unwinder

Another approach to thread stack spoofing.

Rustrusthacking-tooledr-evasion
This is stars and forks stats for /Kudaes/Unwinder repository. As of 18 Apr, 2024 this repository has 154 stars and 18 forks.

Description This Twitter thread inspired the creation of this tool. Unwinder is a PoC of how to parse PE's UNWIND_INFO structs in order to achieve "proper" thread stack spoofing from the point of view of the x64 calling convention. For more detailed information about how thread stack is walked in x64 check the official x64 exception handling documentation. The spoofing process overview is as follows: We obtain the stack's memory address where the first return address is located. This return address...
Read on GithubGithub Stats Page
repotechsstarsweeklyforksweekly
huggingface/safetensorsPythonRustMakefile1.6k+1599+2
1Password/typeshareRustSwiftGo2.1k0760
facebookexperimental/hermitRustCShell5660200
not-an-aardvark/lucky-commitRustC1.2k0240
MirrorX-Desktop/MirrorXRustSvelteTypeScript745+1460
starkware-libs/cairoRustCairoOther1.1k02950
r-rust/hellorustRRustC2450190
quinn-rs/quinnRust3k03020
hachyserve/rustypubRust199060
flxzt/rnoteRustMesonOther4.5k+21165+3