Search Results

Found 18 blog topic(s) in 2ms. The latest articles will appear on top:

• 
  Trusted Platform Module in Windows - Part 1

  How to use TPM to encrypt and decrypt small blobs of data programmatically.

  windows-internals

  tpm

  cpp

  reverse-engineer

  low-level

  win10

  win11

  August 28, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Reverse Engineering - Stepping Into a System Call

  How to step into a SYSCALL with a debugger using kernel binary patch.

  windows-internals

  windows-kernel

  reverse-engineer

  asm

  debugger

  low-level

  undocumented

  win10

  ...

  August 25, 2023

  by Dennis A. Babkin
• 
  Native Functions To The Rescue - Part 1

  How to make a critical process that can crash Windows if it is closed.

  windows-internals

  undocumented

  win10

  win11

  win32

  reverse-engineer

  low-level

  August 22, 2023

  by Dennis A. Babkin

  by Rbmm
• 
  Critical Section vs Kernel Objects

  Spinning in user-mode versus entering kernel - the cost of a SYSCALL in Windows.

  windows-internals

  windows-kernel

  reverse-engineer

  asm

  debugger

  low-level

  undocumented

  mitigation-policy

  ...

  August 19, 2023

  by Dennis A. Babkin
• 
  Reverse Engineering & Binary Augmentation - Snipping Tool

  Screencasts of the reverse engineering process to make binary patches to modify discontinued Microsoft Snipping Tool.

  reverse-engineer

  asm

  debugger

  low-level

  compiler

  pe

  cpp

  shellcode

  ...

  August 8, 2023

  by Dennis A. Babkin
• 
  Reverse Engineering - Tips For Beginners

  What do you need to become a software reverse engineer?

  reverse-engineer

  debugger

  low-level

  July 26, 2023

  by Dennis A. Babkin
• 
  Reverse Engineering - VM Setup - Windows

  How to set up a virtual machine for your reverse engineering work on Windows.

  reverse-engineer

  debugger

  win10

  low-level

  pe

  vm

  vmware

  windbg-preview

  July 23, 2023

  by Dennis A. Babkin
• 
  Things You Thought You Knew - Getting Windows Version

  How to tell the "real" version of Windows your app is running on?

  windows-internals

  win32

  reverse-engineer

  undocumented

  October 20, 2022

  by Dennis A. Babkin

  by Rbmm
• 
  Crazy APIs & Silly Documentation - Part 1

  Microsoft's MSDN faux pas & weird sh*t you can find while reverse engineering Windows.

  silly-doc

  weird-api

  windows-internals

  reverse-engineer

  win10

  first post

  July 31, 2022

  by Dennis A. Babkin

  by Rbmm
• 
  When Developers Give Up - DeleteSecurityPackage Function

  Why it pays off to look into some Win32 functions with a disassembler.

  reverse-engineer

  undocumented

  windows-internals

  asm

  cpp

  debugger

  October 13, 2021

  by Dennis A. Babkin
• 
  Controlling Windows 10 Updates

  How to enable installation of updates or to prevent it during a reboot or shutdown.

  updates

  win10

  reverse-engineer

  windows-internals

  undocumented

  January 21, 2021

  by Dennis A. Babkin

  by Rbmm
• 
  Things You Thought You Knew - Current COM Apartment Model

  How to get the COM concurrency model for the current thread.

  com

  reverse-engineer

  cpp

  January 12, 2021

  by Rbmm

  by Dennis A. Babkin
• 
  Patching Bugs - Windows Update Service - Part 2

  Second custom patch for the DLL hijack bug in the Windows Update Service.

  win10

  updates

  bug

  reverse-engineer

  windows-internals

  January 12, 2021

  by Rbmm

  by Dennis A. Babkin
• 
  Patching Bugs - Windows Update Service

  Custom patch for the DLL hijack bug in the Windows Update Service.

  win10

  updates

  bug

  reverse-engineer

  windows-internals

  January 8, 2021

  by Dennis A. Babkin
• 
  Pwning Windows Updates - DLL Hijacking Through Orphaned DLL

  Exploiting bug in Windows Update Service to gain local privilege escalation through DLL hijacking.

  win10

  updates

  bug

  reverse-engineer

  windows-internals

  September 12, 2020

  by Dennis A. Babkin

  by Rbmm