From 2f1765ba6c35a890ef984c871046504d8199f50a Mon Sep 17 00:00:00 2001 From: pe3zx Date: Fri, 27 Aug 2021 12:48:20 +0700 Subject: [PATCH] Add: mobdk/Upsilon to Execution section --- Offensive.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/Offensive.md b/Offensive.md index 420fbfc..5776da7 100644 --- a/Offensive.md +++ b/Offensive.md @@ -538,8 +538,11 @@ Some tools can be categorized in more than one category. But because the current mobdk/Sigma - Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and - ZwCreateThreadEx + Execute shellcode with ZwCreateSection, ZwMapViewOfSection, ZwOpenProcess, ZwMapViewOfSection and ZwCreateThreadEx + + + mobdk/Upsilon + Upsilon execute shellcode with syscalls - no API like NtProtectVirtualMemory is used monoxgas/sRDI