logo

Using RPC in BOFs

ID: 723032eb-0e44-5c8a-bdb8-cd80dbd04ed7

STIX ID: report--723032eb-0e44-5c8a-bdb8-cd80dbd04ed7

Feed Name: TrustedSec blog

Date Published: 2025-03-24

Date Updated: 2026-05-01

...
...

This blog post documents converting an RPC-based Windows proof-of-concept into a Beacon Object File (BOF), covering planning decisions, code conversions, build and linker issues (relocations and SEH), and runtime workarounds such as vectored exception handlers and a sacrificial thread; it focuses on technical implementation and loader compatibility rather than describing an actual security incident.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.