Search Results

Found 8 blog topic(s) in 3ms. The latest articles will appear on top:

• 
  Reverse Engineering - Stepping Into a System Call

  How to step into a SYSCALL with a debugger using kernel binary patch.

  windows-internals

  windows-kernel

  reverse-engineer

  asm

  debugger

  low-level

  undocumented

  win10

  ...

  August 25, 2023

  by Dennis A. Babkin
• 
  Critical Section vs Kernel Objects

  Spinning in user-mode versus entering kernel - the cost of a SYSCALL in Windows.

  windows-internals

  windows-kernel

  reverse-engineer

  asm

  debugger

  low-level

  undocumented

  mitigation-policy

  ...

  August 19, 2023

  by Dennis A. Babkin
• 
  So You Want to Code-Sign Windows Kernel Drivers?

  How to get a certificate, and the process of code-signing Windows kernel drivers.

  windows-kernel

  code-signing

  September 15, 2022

  by Dennis A. Babkin

  by Rbmm
• 
  Coding Windows Kernel Driver - InjectAll

  Making the Visual Studio solution for DLL injection into all running processes.

  windows-kernel

  win32

  windows-internals

  cpp

  msvs

  apc

  asm

  pe

  ...

  May 29, 2021

  by Dennis A. Babkin

  by Rbmm
• 
  Depths of Windows APC

  Aspects of internals of the Asynchronous Procedure Calls from the kernel mode.

  windows-internals

  apc

  windows-kernel

  win32

  cfg

  undocumented

  asm

  November 27, 2020

  by Rbmm

  by Dennis A. Babkin
• 
  Pwning Windows Kernel - Unkillable User-Mode Process

  Windows 10 kernel deadlock bug and our experience submitting it to Microsoft Security Response Center.

  windows-kernel

  reverse-engineer

  bug

  msrc

  September 9, 2020

  by Dennis A. Babkin

  by Rbmm
• 
  Windows Kernel Debugging - Running WinDbg Preview In An Older OS

  Installing WinDbg Preview in an operating system prior to Windows 10.

  windows-kernel

  windbg-preview

  debugger

  appx

  undocumented

  August 21, 2020

  by Dennis A. Babkin
• 
  Windows Kernel Debugging - WinDbg Next Setup

  Setting up WinDbg Next for kernel debugging via fast network connection in WMware VM.

  windows-kernel

  debugger

  windbg-preview

  vm

  vmware

  reverse-engineer

  August 12, 2020

  by Dennis A. Babkin