Search Results

Found 8 blog topic(s) in 2ms. The latest articles will appear on top:

• 
  Reverse Engineering & Binary Augmentation - Snipping Tool

  Screencasts of the reverse engineering process to make binary patches to modify discontinued Microsoft Snipping Tool.

  reverse-engineer

  asm

  debugger

  low-level

  compiler

  pe

  cpp

  shellcode

  ...

  August 8, 2023

  by Dennis A. Babkin
• 
  Reverse Engineering - VM Setup - Windows

  How to set up a virtual machine for your reverse engineering work on Windows.

  reverse-engineer

  debugger

  win10

  low-level

  pe

  vm

  vmware

  windbg-preview

  July 23, 2023

  by Dennis A. Babkin
• 
  Coding Windows Kernel Driver - InjectAll

  Making the Visual Studio solution for DLL injection into all running processes.

  windows-kernel

  win32

  windows-internals

  cpp

  msvs

  apc

  asm

  pe

  ...

  May 29, 2021

  by Dennis A. Babkin

  by Rbmm
• 
  Intricacies of Microsoft Compilers

  The case of a curious __imp_.

  asm

  msvs

  compiler

  cpp

  debugger

  pe

  undocumented

  April 26, 2021

  by Dennis A. Babkin
• 
  Coding Production-Style Application - SigRemover

  C++ application to remove digital signature from a binary file. Coding it from start-to-finish, with code safety tips, bug fixes and test fuzzing.

  win32

  cpp

  pe

  msvs

  debugger

  c#

  .net

  fuzzing

  ...

  April 24, 2021

  by Dennis A. Babkin
• 
  Windows Security Legacy

  DLL Hijacking - Why running executables from a user-writable location is a bad idea.

  windows-internals

  pe

  win10

  vulnerability

  bug

  anti-malware

  cig

  mitigation-policy

  November 13, 2020

  by Dennis A. Babkin
• 
  Deep Dive Into Windows PE Format - GetProcAddress Spoofing

  Malware researchers - Beware of GetProcAddress spoofing via manipulation of PE format in memory.

  windows-internals

  asm

  pe

  anti-malware

  msrc

  October 1, 2020

  by Dennis A. Babkin
• 
  Deep Dive Into Assembly Language - Windows Shellcode - GetProcAddress

  How to implement GetProcAddress in shellcode using x86-64 and x86 assembly language.

  windows-internals

  asm

  shellcode

  pe

  September 14, 2020

  by Dennis A. Babkin