admin/Cracked5pider-Ekko
1
0
Fork 0
mirror of https://github.com/Cracked5pider/Ekko/ synced 2026-06-06 15:34:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update README.md

Browse Source
This commit is contained in:
C5pider
2022-06-22 12:53:21 +02:00
committed by GitHub
parent d240146db3
commit 9db598259d
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+2 -1
View File
@@ -1,7 +1,8 @@
# Ekko
A small sleep obfuscation technique that uses `CreateTimerQueueTimer` to queue up the ROP chain that performs Sleep obfuscation
A small sleep obfuscation technique that uses `CreateTimerQueueTimer` Win32 API.
Proof of Concept. Can be done better
### Credit
- [Austin Hudson (@SecIdiot)](https://twitter.com/ilove2pwn_) https://suspicious.actor/2022/05/05/mdsec-nighthawk-study.html