Skip to content

Latest commit

 

History

History
9 lines (9 loc) · 478 Bytes

File metadata and controls

9 lines (9 loc) · 478 Bytes

BE-Shellcode

Code for Battleyes shellcode

  • Exception handler that checks for return addresses that match report criteria
  • find hidden system threads by checking kernel time delta
  • detect hooks that want to catch exceptions (KiUserExceptionDispatcher)
  • detect blacklisted dlls (+checks for import etc) + blacklisted drivers
  • check integrity of important functions
  • check all threads in local process and find RIPs that match report criteria
  • find blacklisted signatures