Using Direct Syscalls in Cobalt Strike's Artifact Kit
This video demonstrates how to use direct syscalls in Cobalt Strike's Artifact Kit to avoid userland hooks when loading Beacon shellcode.
This video is an amalgamation of ideas from these two blog posts:
Using Direct Syscalls from Beacon Object Files [and MinGW]
https://outflank.nl/blog/2020/12/26/d...
Implementing Syscalls in the Artifact Kit
https://br-sn.github.io/Implementing-...