top of page
FORREST ORR
<Malware, Exploits and Red Teaming/>
![](https://static.wixstatic.com/media/c1d8f6_cf4ed22bfd1b40f09ce27d0ac85db3cb~mv2.jpg/v1/fill/w_250,h_250,fp_0.50_0.50,q_30,blur_30,enc_auto/c1d8f6_cf4ed22bfd1b40f09ce27d0ac85db3cb~mv2.webp)
![A Modern Exploration of Windows Memory Corruption Exploits - Part I: Stack Overflows](https://static.wixstatic.com/media/c1d8f6_cf4ed22bfd1b40f09ce27d0ac85db3cb~mv2.jpg/v1/fill/w_473,h_355,fp_0.50_0.50,q_90,enc_auto/c1d8f6_cf4ed22bfd1b40f09ce27d0ac85db3cb~mv2.webp)
Forrest Orr
Dec 1, 202037 min read
A Modern Exploration of Windows Memory Corruption Exploits - Part I: Stack Overflows
Introduction The topic of memory corruption exploits can be a difficult one to initially break in to. When I first began to explore this...
16,557 views5 comments
![Masking Malicious Memory Artifacts – Part III: Bypassing Defensive Scanners](https://static.wixstatic.com/media/c1d8f6_8fff0224f13f40888c68ba730aadaf6e~mv2.png/v1/fill/w_473,h_355,fp_0.50_0.50,q_95,enc_auto/c1d8f6_8fff0224f13f40888c68ba730aadaf6e~mv2.webp)
Forrest Orr
Aug 4, 202023 min read
Masking Malicious Memory Artifacts – Part III: Bypassing Defensive Scanners
Introduction With fileless malware becoming a ubiquitous feature of most modern Red Teams, knowledge in the domain of memory stealth and...
9,870 views0 comments
![](https://static.wixstatic.com/media/c1d8f6_5c281d0c774e4f0eb5aaf882bc8c2568~mv2.jpg/v1/fill/w_250,h_250,fp_0.50_0.50,q_30,blur_30,enc_auto/c1d8f6_5c281d0c774e4f0eb5aaf882bc8c2568~mv2.webp)
![Masking Malicious Memory Artifacts – Part II: Blending in with False Positives](https://static.wixstatic.com/media/c1d8f6_5c281d0c774e4f0eb5aaf882bc8c2568~mv2.jpg/v1/fill/w_473,h_355,fp_0.50_0.50,q_90,enc_auto/c1d8f6_5c281d0c774e4f0eb5aaf882bc8c2568~mv2.webp)
Forrest Orr
Jul 16, 202019 min read
Masking Malicious Memory Artifacts – Part II: Blending in with False Positives
Introduction With fileless malware becoming a ubiquitous feature of most modern Red Teams, knowledge in the domain of memory stealth and...
14,163 views0 comments
bottom of page