api-hooking

Main Stage·39 min

• DEF CON
• Red Team
• Date: Aug 2024
• Location: Las Vegas

Helvio Carvalho Junior

HookChain technique for dynamically altering API call sequences and hooking mechanics to bypass EDR telemetry in memory.

Main Stage·39 min

• DEF CON
• Malware
• Date: Aug 2016
• Location: Las Vegas

K2

K2 introduces BlockFighter2, an execution-tracing framework utilizing binary hooking to inspect and manipulate control flow within compiled code at runtime.

Main Stage·39 min

• DEF CON
• Red Team
• Date: Aug 2015
• Location: Las Vegas

Topher Timzen · Ryan Allen

Topher Timzen and Ryan Allen demonstrate runtime hooking and control flow redirection inside compiled .NET assemblies using CLR profiling APIs.