Shhhloader

Shhhloader Shhhloader é um carregador de shellcode em desenvolvimento. Ele recebe shellcode bruto como entrada e compila um stub em C++ que realiza várias ações para tentar contornar AV/EDR. O construtor Python incluído funciona em qualquer sistema Linux com Mingw-w64 instalado. Edição de 25/01/2...

PoolParty

PoolParty Una raccolta di tecniche di process injection completamente non rilevabili che abusano dei Thread Pool di Windows. Presentata ai Black Hat EU 2023 Briefings con il titolo - The Pool Party You Will Never Forget: New Process Injection Techniques Using Windows Thread Pools Varianti di...

Malicious code in jquery-poolparty (npm)

The package jquery-poolparty was found to contain malicious code...

MAL-2025-23898 Malicious code in jquery-poolparty (npm)

The package jquery-poolparty was found to contain malicious code...

New PoolParty Process Injection Techniques Outsmart Top EDR Solutions

A new collection of eight process injection techniques, collectively dubbed PoolParty, could be exploited to achieve code execution in Windows systems while evading endpoint detection and response EDR systems. SafeBreach researcher Alon Leviev said the methods are "capable of working across all...