Dll Proxy

In this blog we will

C++

Assembly (x64)

Setup

Everything which we are going to talk about is done on latest Windows and defender versions, which at the time of writing this blog are -

Windows OS

• Edition: Windows 11 Pro
• Version: 25H2
• OS Build: 26200.7840

Defender Engine

• Client: 4.18.26010.5
• Engine: 1.1.26010.1
• AV / AS: 1.445.222.0

Environment

Everything is created and built to test modern security with all security feature turned ON:

✓ Real-time protection

✓ Tamper Protection

✓ Memory integrity

✓ Memory access protection

✓ Microsoft Vulnerable Driver Blocklist

Warning

This is not just any project built to run in a vulnerable environment with security features turned off. This is some serious work and hence made just for education and research purposes.