Development
-
- Forum
- Topics
- Posts
- Last post
-
-
Kernel-Mode Development
Forum for discussion about kernel-mode development. - 298 Topics
- 1821 Posts
-
Last post by Fyyre
Wed Jun 21, 2017 6:55 pm
-
Kernel-Mode Development
-
-
User-Mode Development
Forum for discussion about user-mode development. - 115 Topics
- 791 Posts
-
Last post by Orkblutt
Thu May 18, 2017 10:26 am
-
User-Mode Development
-
- Active topics
- Replies
- Views
- Last post
-
- Assembler Disassembler Engines
1, 2by Dreg » Mon Mar 15, 2010 9:17 am - 16 Replies
- 44430 Views
- Last post by tangptr
Mon Mar 20, 2017 11:53 am
- Assembler Disassembler Engines
-
- remove protection csrss system hang?
by nullpointer » Sun May 21, 2017 9:11 am - 1 Replies
- 2269 Views
- Last post by Fyyre
Wed Jun 21, 2017 6:55 pm
- remove protection csrss system hang?
-
- Undocumented structures for W2k-Win10
1, 2by rkhunter » Fri Aug 12, 2011 4:04 pm - 18 Replies
- 32944 Views
- Last post by rkhunter
Wed Jun 21, 2017 10:30 am
- Undocumented structures for W2k-Win10
-
- How delete files/folders even still in use by some program?
1, 2by fl4shc0d3r » Fri Jun 09, 2017 2:26 am - 18 Replies
- 3874 Views
- Last post by Brock
Wed Jun 14, 2017 10:44 am
- How delete files/folders even still in use by some program?
-
- SSDT Shadow address on Windows 10?
1, 2by fl4shc0d3r » Wed Jun 07, 2017 10:48 am - 12 Replies
- 3446 Views
- Last post by fl4shc0d3r
Mon Jun 12, 2017 12:33 pm
- SSDT Shadow address on Windows 10?
-
- How find correct original entry in SSDT Shadow table?
by fl4shc0d3r » Mon Apr 10, 2017 7:37 pm - 2 Replies
- 5643 Views
- Last post by fl4shc0d3r
Sun Jun 11, 2017 9:17 pm
- How find correct original entry in SSDT Shadow table?
-
- process id type
by grechkoed » Fri Jun 09, 2017 2:56 pm - 0 Replies
- 1926 Views
- Last post by grechkoed
Fri Jun 09, 2017 2:56 pm
- process id type
-
- What is the correct way to load a kernel mode WFP driver
by Victor43 » Wed May 17, 2017 5:42 pm - 5 Replies
- 4534 Views
- Last post by Brock
Sat May 27, 2017 11:24 pm
- What is the correct way to load a kernel mode WFP driver
-
- ETW discussion
by Orkblutt » Thu May 18, 2017 10:26 am - 0 Replies
- 2209 Views
- Last post by Orkblutt
Thu May 18, 2017 10:26 am
- ETW discussion
-
- How to retrieve the application path for the in/out TCP data
by Victor43 » Sun May 14, 2017 8:16 pm - 4 Replies
- 2446 Views
- Last post by Victor43
Mon May 15, 2017 8:32 pm
- How to retrieve the application path for the in/out TCP data
-
- How to link with ntoskrnl.lib?
by grechkoed » Mon Apr 24, 2017 8:28 am - 4 Replies
- 2835 Views
- Last post by tangptr
Tue Apr 25, 2017 12:55 pm
- How to link with ntoskrnl.lib?
-
- Thread Context Switch Callback
by sima » Tue Apr 18, 2017 3:35 pm - 0 Replies
- 2059 Views
- Last post by sima
Tue Apr 18, 2017 3:35 pm
- Thread Context Switch Callback
-
- 0xc0000005 exception from pnp manager on start minor func
by pwnslinger » Tue Mar 14, 2017 12:01 pm - 4 Replies
- 12707 Views
- Last post by pwnslinger
Mon Mar 27, 2017 12:29 pm
- 0xc0000005 exception from pnp manager on start minor func
-
- PsSetLoadImageNotifyRoutine can't monitor some drivers
by pboy0922 » Sat Jul 30, 2016 3:18 pm - 7 Replies
- 10549 Views
- Last post by 0xf0f
Wed Mar 15, 2017 12:01 pm
- PsSetLoadImageNotifyRoutine can't monitor some drivers
-
- MM code bug check for vad erase
by 0xf0f » Mon Mar 13, 2017 7:30 am - 5 Replies
- 3935 Views
- Last post by 0xf0f
Wed Mar 15, 2017 11:59 am
- MM code bug check for vad erase
-
- How can I distinguish shutdown or reboot in kernel mode?
by vs2099 » Sat Feb 25, 2017 3:20 am - 9 Replies
- 6611 Views
- Last post by Vrtule
Wed Mar 08, 2017 5:55 pm
- How can I distinguish shutdown or reboot in kernel mode?
-
- The NT Insider: July/August 2015 Issue
by rkhunter » Fri Mar 22, 2013 7:47 am - 6 Replies
- 16358 Views
- Last post by rkhunter
Wed Mar 01, 2017 9:42 am
- The NT Insider: July/August 2015 Issue
-
- How I FUDed a meterpreter payload!!
by kd77 » Sun Feb 26, 2017 2:23 pm - 1 Replies
- 3511 Views
- Last post by EP_X0FF
Sun Feb 26, 2017 4:54 pm
- How I FUDed a meterpreter payload!!
-
- Integrity check of DLL from Driver
by evelyette » Wed Feb 22, 2017 11:26 pm - 3 Replies
- 4341 Views
- Last post by Vrtule
Thu Feb 23, 2017 9:04 am
- Integrity check of DLL from Driver
-
- KdPrint not working
by guidono » Wed Feb 22, 2017 1:59 pm - 1 Replies
- 3488 Views
- Last post by Vrtule
Wed Feb 22, 2017 7:51 pm
- KdPrint not working
-
- Why use FltReadFile in miniFilter will cause system slowly?
by ithurricane » Thu Feb 09, 2017 5:22 am - 1 Replies
- 5444 Views
- Last post by ithurricane
Thu Feb 16, 2017 2:53 am
- Why use FltReadFile in miniFilter will cause system slowly?
-
- Mapping ntdll.dll into kernel-mode memory
by evelyette » Fri Feb 10, 2017 11:01 pm - 2 Replies
- 4580 Views
- Last post by evelyette
Mon Feb 13, 2017 6:50 pm
- Mapping ntdll.dll into kernel-mode memory
-
- Callback on ZwOpenSection
by dazzer » Mon Jan 16, 2017 4:09 pm - 2 Replies
- 4919 Views
- Last post by s0me
Fri Feb 03, 2017 1:09 pm
- Callback on ZwOpenSection
-
- How enumerate all subdirectories and files?
by fl4shc0d3r » Wed Jan 25, 2017 11:04 pm - 1 Replies
- 3768 Views
- Last post by EP_X0FF
Thu Jan 26, 2017 5:28 pm
- How enumerate all subdirectories and files?
Who is online
Users browsing this forum: No registered users and 2 guests