User-Mode Development

New Topic

123 topics

Topics

Replies

Views

Last post

Assembler Disassembler Engines

Last post by tangptr « Mon Mar 20, 2017 11:53 am
Replies: 16
by Dreg » Mon Mar 15, 2010 9:17 am
1

2
16 Replies

69533 Views

Last post by tangptr
Mon Mar 20, 2017 11:53 am
[C] File Version check & Update

Last post by EP_X0FF « Mon Jan 14, 2019 1:29 pm
Replies: 1
by KarNak » Sun Jan 13, 2019 1:23 pm

1 Replies

175 Views

Last post by EP_X0FF
Mon Jan 14, 2019 1:29 pm
[C] HTTP-Downloader

Last post by Brock « Tue Jan 15, 2019 1:42 pm
Replies: 4
by KarNak » Sat Jan 12, 2019 11:32 am

4 Replies

356 Views

Last post by Brock
Tue Jan 15, 2019 1:42 pm
[C] UserMode = AdminMode Linux

Last post by nimaarek « Sat Jan 12, 2019 3:22 pm
Replies: 1
by KarNak » Sat Jan 12, 2019 11:39 am

1 Replies

126 Views

Last post by nimaarek
Sat Jan 12, 2019 3:22 pm
Hook and replace Win32 application functions

Last post by KarNak « Sat Jan 12, 2019 11:29 am

by KarNak » Sat Jan 12, 2019 11:29 am

0 Replies

93 Views

Last post by KarNak
Sat Jan 12, 2019 11:29 am
Avoid undocumented API calls (RtlImageNtHeader)?

Last post by j4ck « Wed Dec 19, 2018 4:12 am
Replies: 2
by j4ck » Wed Dec 19, 2018 3:17 am

2 Replies

772 Views

Last post by j4ck
Wed Dec 19, 2018 4:12 am
Tls callback (Ring 3) executes first that a callback configured in PsSetCreateProcessNotifyRoutineEx (Ring 0)?

Last post by pointer « Wed Nov 28, 2018 12:29 pm

by pointer » Wed Nov 28, 2018 12:29 pm

0 Replies

821 Views

Last post by pointer
Wed Nov 28, 2018 12:29 pm
How to load frames from BMP in C++ using HBITMAP?

Last post by mrfearless « Mon Sep 17, 2018 3:08 am
Replies: 1
by Darko Risteski » Sat Sep 08, 2018 12:36 pm

1 Replies

1361 Views

Last post by mrfearless
Mon Sep 17, 2018 3:08 am
Process Doppelganging

Last post by EP_X0FF « Thu Jul 05, 2018 6:05 am
Replies: 7
by EP_X0FF » Wed Dec 13, 2017 2:31 pm

7 Replies

15398 Views

Last post by EP_X0FF
Thu Jul 05, 2018 6:05 am
ETW discussion

Last post by Orkblutt « Thu May 18, 2017 10:26 am

by Orkblutt » Thu May 18, 2017 10:26 am

0 Replies

11566 Views

Last post by Orkblutt
Thu May 18, 2017 10:26 am
How I FUDed a meterpreter payload!!

Last post by EP_X0FF « Sun Feb 26, 2017 4:54 pm
Replies: 1
by kd77 » Sun Feb 26, 2017 2:23 pm

1 Replies

8427 Views

Last post by EP_X0FF
Sun Feb 26, 2017 4:54 pm
WMI persistence in C++

Last post by geoffreyvdb « Fri Aug 19, 2016 2:12 pm

by geoffreyvdb » Fri Aug 19, 2016 2:12 pm

0 Replies

17515 Views

Last post by geoffreyvdb
Fri Aug 19, 2016 2:12 pm
Monitoring Processes on Windows NT from Usermode (x86 & x64)

Last post by EP_X0FF « Thu Jul 21, 2016 5:34 am
Replies: 19
by Mut4nt » Sat Nov 10, 2012 6:01 pm
1

2
19 Replies

43690 Views

Last post by EP_X0FF
Thu Jul 21, 2016 5:34 am
EnumDisplayMonitors

Last post by EP_X0FF « Sat Jul 02, 2016 9:06 am
Replies: 2
by EP_X0FF » Sat Jul 02, 2016 6:27 am

2 Replies

9075 Views

Last post by EP_X0FF
Sat Jul 02, 2016 9:06 am
EntryPoint in LDR_DATA_TABLE_ENTRY

Last post by EP_X0FF « Wed Dec 30, 2015 4:06 am
Replies: 1
by evelyette » Tue Dec 29, 2015 10:40 am

1 Replies

8411 Views

Last post by EP_X0FF
Wed Dec 30, 2015 4:06 am
Hooking usage of DLL function

Last post by evelyette « Fri Dec 18, 2015 10:24 am
Replies: 17
by evelyette » Wed Nov 18, 2015 7:09 pm
1

2
17 Replies

29788 Views

Last post by evelyette
Fri Dec 18, 2015 10:24 am
Proxy DLL with Exported Structure

Last post by Brock « Wed Dec 16, 2015 10:47 pm
Replies: 11
by evelyette » Mon Dec 14, 2015 8:20 pm
1

2
11 Replies

20367 Views

Last post by Brock
Wed Dec 16, 2015 10:47 pm
Application Verifier Custom Providers

Last post by billbudsocket « Wed Nov 04, 2015 6:13 pm
Replies: 12
by EP_X0FF » Fri Aug 08, 2014 5:31 pm
1

2
12 Replies

39797 Views

Last post by billbudsocket
Wed Nov 04, 2015 6:13 pm
AV SP Discussion & Bypass

Last post by EP_X0FF « Wed Nov 04, 2015 4:47 am
Replies: 121
by R00tKit » Tue Feb 21, 2012 7:58 am
1

…

9

10

11

12

13
121 Replies

205407 Views

Last post by EP_X0FF
Wed Nov 04, 2015 4:47 am
Cannot call any API within hook?

Last post by puzzlex « Wed Oct 21, 2015 9:26 am
Replies: 2
by puzzlex » Tue Oct 20, 2015 12:33 pm

2 Replies

7360 Views

Last post by puzzlex
Wed Oct 21, 2015 9:26 am
Module (PEB/LDR) Hiding (4 Methods)

Last post by kerpow1 « Fri Oct 16, 2015 3:34 pm
Replies: 13
by kerpow1 » Sun Oct 11, 2015 10:50 am
1

2
13 Replies

23380 Views

Last post by kerpow1
Fri Oct 16, 2015 3:34 pm
create rdp session on new desktop

Last post by kobip « Tue Sep 29, 2015 9:38 am
Replies: 7
by kobip » Sun Sep 06, 2015 12:44 pm

7 Replies

14313 Views

Last post by kobip
Tue Sep 29, 2015 9:38 am
[PoC] Bypassing UM Hooks By Bruteforcing Intel Syscalls

Last post by Brock « Sun Aug 30, 2015 5:59 am
Replies: 9
by Microwave89 » Thu Aug 20, 2015 4:23 pm

9 Replies

19022 Views

Last post by Brock
Sun Aug 30, 2015 5:59 am
How to get structure info via PDB file?

Last post by myid « Mon Aug 10, 2015 7:12 am
Replies: 2
by myid » Mon Aug 10, 2015 12:36 am

2 Replies

7934 Views

Last post by myid
Mon Aug 10, 2015 7:12 am
SEH Address

Last post by nothern « Mon Jul 27, 2015 11:32 am

by nothern » Mon Jul 27, 2015 11:32 am

0 Replies

6334 Views

Last post by nothern
Mon Jul 27, 2015 11:32 am

New Topic

123 topics

Return to Board Index

Forum permissions

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum