TLDR InfoSec · STRATEGIES & TACTICS
EXCEPTION JUNCTION - WHERE ALL VECTORS MEET THEIR HANDLER
Summary from the TLDR InfoSec newsletter
Vectored Exception Handler (VEH) is a global exception handler mechanism in Windows that has fewer limitations than Structured Exception Handling. This post provides code that dynamically locates the offset to register a custom VEH and discusses the complexities that arise in the process. It also provides a YARA rule to detect the registered pattern.