Bill Demirkapi
Bill Demirkapi
Try compiling the dll with /MT instead of /MTd.
Hmm, try creating an empty dll, except in the entrypoint on DLL ATTACH make a message box.
This is due to the way that the Spectre Rootkit actually executes commands. Essentially it uses a thread callback to look for a viable thread to start a process from....
Found this issue while trying to secure a cloud deployment of Qdrant. Unfortunately seems non-trivial outside of Qdrant Cloud. @tawalke FYI- looks like the default config in this repo exposes...