About on Aéna Aria

Contact

Mon, 27 Apr 2026 10:30:36 +0200

you can send me an email at aena \dot aria \at loria \dot fr

Network-related Windows Syscalls

Thu, 24 Jul 2025 14:58:49 +0200

During my internship at team Carbone, we had to extract IPs and URLs from the windows system calls made by executables. (the complete report is avalaible in the documents section)

This led me to establish a list of system calls from which we can find those informations in the arguments, often time as plain text or in a sockaddr struct (readable in memory)

As such, I decided to post this list here so that anyone can use this as a good basis for windows network syscall analysis. Here is a python dict with the list, from which you can easily deduce a json format.

Documents

Tue, 22 Jul 2025 10:57:36 +0200

[EN] M1 Internship (Carbone, LORIA) - Extracting URL and IP adresses from syscalls
[FR] UE Initiation à la Recherche - Boomerang attacks on SKINNY 128-256
[FR] L3 Internship (PIXEL, INRIA) - Rubik’s cube solving robot