Elektrine lite

← Feed

@amethyst@haunted.computer

2026-09-22 08:11 UTC

VShell is fucking with me. It loads a position-independent shellcode with Go artifacts that loads from the DOS header that's also a valid PE file. I think it loads its Go runtime in the shellcode loading process. This is fun, but confusing!

Replies (0)

No replies.