smaller evasion footprint without trashing the stack. the kind of detail that keeps AV asleep while you walk out the door.
> New research: InsomniacUnwinding
> "Call stack spoofing is mandatory for sleep masking"
> No, it's not. Surgical UNWIND_INFO preservation: ~250 bytes vs ~6KB .rdata. Signatures encrypted, stack intact, no spoofing.
> Github:
> https://
> github.com/kapla0011/Inso
> mniacUnwinding
> …
> Blog:
— @LorenzoMeacci
https://t.co/3O37yFy4i8
https://t.co/8iN9GuJJHg
https://t.co/8iN9GuJJHg
GitHub - kapla0011/InsomniacUnwinding: Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing. (GitHub)
Unwind Data Can't Sleep - Introducing InsomniacUnwinding | Lorenzo Meacci (Lorenzo Meacci)
Unwind Data Can't Sleep - Introducing InsomniacUnwinding | Lorenzo Meacci (Lorenzo Meacci)
#cybersecurity #infosec #news #research
https://x.com/LorenzoMeacci/status/2038322337888542815
DefectiveCISO
npub1c5…zhcn0
2026-03-29 21:19:08 UTC
Author Public Key
npub1c523x9jh7yl5fpk07xmq0zs09tfapqav6rpt7343j23nlruqalyqezhcn0Published at
2026-03-29 21:19:08 UTCEvent JSON
{
"id": "c5799b6dc48f52ad84c568e81dd4fb4e4ad4a5cae9767d0aaa1ac01a5b234a3c",
"pubkey": "c515131657f13f4486cff1b6078a0f2ad3d083acd0c2bf46b192a33f8f80efc8",
"created_at": 1774819148,
"kind": 1,
"tags": [
[
"t",
"cybersecurity"
],
[
"t",
"infosec"
],
[
"t",
"news"
],
[
"t",
"research"
],
[
"r",
"https://t.co/3O37yFy4i8"
],
[
"r",
"https://t.co/8iN9GuJJHg"
],
[
"r",
"https://t.co/8iN9GuJJHg"
],
[
"r",
"https://x.com/LorenzoMeacci/status/2038322337888542815"
],
[
"source",
"x.com"
]
],
"content": "smaller evasion footprint without trashing the stack. the kind of detail that keeps AV asleep while you walk out the door.\n\n\u003e New research: InsomniacUnwinding\n\u003e \"Call stack spoofing is mandatory for sleep masking\" \n\u003e No, it's not. Surgical UNWIND_INFO preservation: ~250 bytes vs ~6KB .rdata. Signatures encrypted, stack intact, no spoofing.\n\u003e Github: \n\u003e https://\n\u003e github.com/kapla0011/Inso\n\u003e mniacUnwinding\n\u003e …\n\u003e Blog:\n— @LorenzoMeacci\n\nhttps://t.co/3O37yFy4i8\nhttps://t.co/8iN9GuJJHg\nhttps://t.co/8iN9GuJJHg\n\nGitHub - kapla0011/InsomniacUnwinding: Surgical UNWIND_INFO preservation for sleep masking without call stack spoofing. (GitHub)\nUnwind Data Can\u0026#39;t Sleep - Introducing InsomniacUnwinding | Lorenzo Meacci (Lorenzo Meacci)\nUnwind Data Can\u0026#39;t Sleep - Introducing InsomniacUnwinding | Lorenzo Meacci (Lorenzo Meacci)\n\n#cybersecurity #infosec #news #research\nhttps://x.com/LorenzoMeacci/status/2038322337888542815",
"sig": "c7b3f7782437324975fe5ffc76dd1814da314867c515861d3e806fa2f5e99ed112a1ed5b45262b3b360b95fa901e3a72e1e15dab9e85e80ce5b2fa4578f6ebb2"
}