TLDR InfoSec · STRATEGIES & TACTICS

EXCEPTION JUNCTION - WHERE ALL VECTORS MEET THEIR HANDLER

bruteratel.com10 min read

Summary from the TLDR InfoSec newsletter

Vectored Exception Handler (VEH) is a global exception handler mechanism in Windows that has fewer limitations than Structured Exception Handling. This post provides code that dynamically locates the offset to register a custom VEH and discusses the complexities that arise in the process. It also provides a YARA rule to detect the registered pattern.