Development
-
- Forum
- Topics
- Posts
- Last post
-
-
Kernel-Mode Development
Forum for discussion about kernel-mode development. - 306 Topics
- 1872 Posts
-
Last post by TSION
Fri Aug 18, 2017 1:01 pm
-
Kernel-Mode Development
-
-
User-Mode Development
Forum for discussion about user-mode development. - 115 Topics
- 791 Posts
-
Last post by Orkblutt
Thu May 18, 2017 10:26 am
-
User-Mode Development
-
- Active topics
- Replies
- Views
- Last post
-
- Assembler Disassembler Engines
1, 2by Dreg » Mon Mar 15, 2010 9:17 am - 16 Replies
- 48351 Views
- Last post by tangptr
Mon Mar 20, 2017 11:53 am
- Assembler Disassembler Engines
-
- WIN64 Driver Development Basic Tutorial
by m5home » Fri Jun 13, 2014 9:18 am - 9 Replies
- 13811 Views
- Last post by TSION
Fri Aug 18, 2017 1:01 pm
- WIN64 Driver Development Basic Tutorial
-
- BSOD in RtlInitAnsiString() function
by fl4shc0d3r » Thu Aug 17, 2017 7:56 pm - 4 Replies
- 956 Views
- Last post by Brock
Fri Aug 18, 2017 12:10 pm
- BSOD in RtlInitAnsiString() function
-
- How access my driver using CreateFile() api?
by fl4shc0d3r » Sat Aug 12, 2017 3:41 pm - 1 Replies
- 1692 Views
- Last post by Vrtule
Sat Aug 12, 2017 6:00 pm
- How access my driver using CreateFile() api?
-
- How find correct original entry in SSDT Shadow table?
by fl4shc0d3r » Mon Apr 10, 2017 7:37 pm - 5 Replies
- 9253 Views
- Last post by fl4shc0d3r
Thu Aug 10, 2017 7:20 pm
- How find correct original entry in SSDT Shadow table?
-
- csrss.exe process for access win32k.sys ssdt shadow table?
by fl4shc0d3r » Tue Aug 08, 2017 5:49 am - 7 Replies
- 2419 Views
- Last post by fl4shc0d3r
Thu Aug 10, 2017 5:38 pm
- csrss.exe process for access win32k.sys ssdt shadow table?
-
- x32 SSDT Restore: compilation errors
1, 2by fl4shc0d3r » Mon Aug 07, 2017 1:55 pm - 10 Replies
- 2091 Views
- Last post by EP_X0FF
Tue Aug 08, 2017 9:44 am
- x32 SSDT Restore: compilation errors
-
- How delete files/folders even still in use by some program?
1, 2, 3by fl4shc0d3r » Fri Jun 09, 2017 2:26 am - 25 Replies
- 12259 Views
- Last post by Brock
Fri Aug 04, 2017 6:26 am
- How delete files/folders even still in use by some program?
-
- Very Simple Question: How to read any kernel address safely?
by myid » Tue Jul 18, 2017 6:23 am - 5 Replies
- 5740 Views
- Last post by tangptr
Wed Aug 02, 2017 6:36 pm
- Very Simple Question: How to read any kernel address safely?
-
- Exception handling in dynamic allocated x64 code
by grechkoed » Thu Jul 27, 2017 3:02 pm - 0 Replies
- 1673 Views
- Last post by grechkoed
Thu Jul 27, 2017 3:02 pm
- Exception handling in dynamic allocated x64 code
-
- Reading pageable memory at HIGH_LEVEL
by pwl » Fri Jul 07, 2017 6:22 pm - 1 Replies
- 1736 Views
- Last post by pwl
Sun Jul 09, 2017 9:30 am
- Reading pageable memory at HIGH_LEVEL
-
- Paging structures for win7/win10 64bit
by pwl » Tue Jul 04, 2017 6:31 am - 2 Replies
- 2495 Views
- Last post by pwl
Fri Jul 07, 2017 6:02 pm
- Paging structures for win7/win10 64bit
-
- remove protection csrss system hang?
by nullpointer » Sun May 21, 2017 9:11 am - 2 Replies
- 12437 Views
- Last post by Brock
Thu Jun 22, 2017 8:36 pm
- remove protection csrss system hang?
-
- Undocumented structures for W2k-Win10
1, 2by rkhunter » Fri Aug 12, 2011 4:04 pm - 18 Replies
- 40685 Views
- Last post by rkhunter
Wed Jun 21, 2017 10:30 am
- Undocumented structures for W2k-Win10
-
- SSDT Shadow address on Windows 10?
1, 2by fl4shc0d3r » Wed Jun 07, 2017 10:48 am - 12 Replies
- 6876 Views
- Last post by fl4shc0d3r
Mon Jun 12, 2017 12:33 pm
- SSDT Shadow address on Windows 10?
-
- process id type
by grechkoed » Fri Jun 09, 2017 2:56 pm - 0 Replies
- 4450 Views
- Last post by grechkoed
Fri Jun 09, 2017 2:56 pm
- process id type
-
- What is the correct way to load a kernel mode WFP driver
by Victor43 » Wed May 17, 2017 5:42 pm - 5 Replies
- 7081 Views
- Last post by Brock
Sat May 27, 2017 11:24 pm
- What is the correct way to load a kernel mode WFP driver
-
- ETW discussion
by Orkblutt » Thu May 18, 2017 10:26 am - 0 Replies
- 6738 Views
- Last post by Orkblutt
Thu May 18, 2017 10:26 am
- ETW discussion
-
- How to retrieve the application path for the in/out TCP data
by Victor43 » Sun May 14, 2017 8:16 pm - 4 Replies
- 4658 Views
- Last post by Victor43
Mon May 15, 2017 8:32 pm
- How to retrieve the application path for the in/out TCP data
-
- How to link with ntoskrnl.lib?
by grechkoed » Mon Apr 24, 2017 8:28 am - 4 Replies
- 4937 Views
- Last post by tangptr
Tue Apr 25, 2017 12:55 pm
- How to link with ntoskrnl.lib?
-
- Thread Context Switch Callback
by sima » Tue Apr 18, 2017 3:35 pm - 0 Replies
- 4091 Views
- Last post by sima
Tue Apr 18, 2017 3:35 pm
- Thread Context Switch Callback
-
- 0xc0000005 exception from pnp manager on start minor func
by pwnslinger » Tue Mar 14, 2017 12:01 pm - 4 Replies
- 14865 Views
- Last post by pwnslinger
Mon Mar 27, 2017 12:29 pm
- 0xc0000005 exception from pnp manager on start minor func
-
- PsSetLoadImageNotifyRoutine can't monitor some drivers
by pboy0922 » Sat Jul 30, 2016 3:18 pm - 7 Replies
- 13280 Views
- Last post by 0xf0f
Wed Mar 15, 2017 12:01 pm
- PsSetLoadImageNotifyRoutine can't monitor some drivers
-
- MM code bug check for vad erase
by 0xf0f » Mon Mar 13, 2017 7:30 am - 5 Replies
- 6074 Views
- Last post by 0xf0f
Wed Mar 15, 2017 11:59 am
- MM code bug check for vad erase
Who is online
Users browsing this forum: No registered users and 1 guest