Learn Backend Development Part-Time, Online
Learn the Skills Netflix, Meta, and Capital One Actually Hire For
Overview
Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This talk examines how WoW64 translates 32-bit system interrupts for 64-bit Windows and explores security issues in crossing architectures. It presents techniques including direct 64-bit NtDLL calls, EDR hook bypasses, rebuilding the translation engine, and WoW64 thread-context injection.
Syllabus
Intro
Outline
Chamber
Reversing Engineering
Recap
WoWGrill
WoW Injector
Taught by
Hack In The Box Security Conference