Development

Forum

Topics

Posts

Last post

Kernel-Mode Development
Forum for discussion about kernel-mode development.
Topics: 309

309 Topics

1882 Posts

Last post Re: Is possible to hide a con…
by Shinji View the latest post
Fri Apr 13, 2018 12:05 pm
User-Mode Development
Forum for discussion about user-mode development.
Topics: 117

117 Topics

802 Posts

Last post Re: NtQueryInformationFile() …
by Li Yong View the latest post
Thu Apr 12, 2018 7:45 pm

Active topics

Replies

Views

Last post

Assembler Disassembler Engines

Last post by tangptr « Mon Mar 20, 2017 11:53 am
Replies: 16
by Dreg » Mon Mar 15, 2010 9:17 am
1

2
16 Replies

56065 Views

Last post by tangptr
Mon Mar 20, 2017 11:53 am
Device Driver Development for Beginners - Reloaded

Last post by guidono « Wed Feb 22, 2017 1:57 pm
Replies: 22
by Evilcry » Mon Oct 04, 2010 6:14 am
1

2

3
22 Replies

79136 Views

Last post by guidono
Wed Feb 22, 2017 1:57 pm
Is possible to hide a connection using windows filtering platform (WFP) ?

Last post by Shinji « Fri Apr 13, 2018 12:05 pm
Replies: 2
by Shinji » Wed Apr 11, 2018 1:14 pm

2 Replies

215 Views

Last post by Shinji
Fri Apr 13, 2018 12:05 pm
NtQueryInformationFile() FileProcessIdsUsingFileInformation: How prevent repeatition of same(s) process(es)?

Last post by Li Yong « Thu Apr 12, 2018 7:45 pm
Replies: 1
by Li Yong » Mon Apr 09, 2018 11:16 pm

1 Replies

249 Views

Last post by Li Yong
Thu Apr 12, 2018 7:45 pm
Is possible remove a file protected by a file system filter driver?

Last post by Vrtule « Fri Mar 23, 2018 1:35 pm
Replies: 8
by Li Yong » Mon Mar 19, 2018 3:18 am

8 Replies

1105 Views

Last post by Vrtule
Fri Mar 23, 2018 1:35 pm
How to Converting PWSTR to UNICODE_STRING in a Kernel Driver

Last post by Vrtule « Sun Mar 18, 2018 7:26 pm
Replies: 2
by sharpmddr » Sun Mar 18, 2018 5:28 am

2 Replies

417 Views

Last post by Vrtule
Sun Mar 18, 2018 7:26 pm
ObRegisterCallbacks return 0xC0000022 error

Last post by Brock « Thu Feb 22, 2018 10:27 pm
Replies: 2
by Cuidightheach » Thu Feb 22, 2018 8:28 am

2 Replies

837 Views

Last post by Brock
Thu Feb 22, 2018 10:27 pm
Undocumented structures for W2k-Win10

Last post by rkhunter « Sat Jan 13, 2018 7:14 am
Replies: 21
by rkhunter » Fri Aug 12, 2011 4:04 pm
1

2

3
21 Replies

56305 Views

Last post by rkhunter
Sat Jan 13, 2018 7:14 am
How to redirect registry key in registry callback?

Last post by myid « Thu Dec 21, 2017 7:28 am
Replies: 4
by myid » Tue Dec 19, 2017 2:04 pm

4 Replies

4389 Views

Last post by myid
Thu Dec 21, 2017 7:28 am
Process Doppelganging

Last post by EP_X0FF « Wed Dec 13, 2017 2:31 pm

by EP_X0FF » Wed Dec 13, 2017 2:31 pm

0 Replies

6856 Views

Last post by EP_X0FF
Wed Dec 13, 2017 2:31 pm
Allocate virtual system space page at specified base address

Last post by chanselisee « Sat Dec 02, 2017 2:03 pm
Replies: 2
by chanselisee » Sat Dec 02, 2017 12:06 am

2 Replies

2912 Views

Last post by chanselisee
Sat Dec 02, 2017 2:03 pm
IoCallDriver return STATUS_PENDING, will it BSOD if NOT wait

Last post by myid « Thu Nov 30, 2017 1:14 pm
Replies: 19
by myid » Sat Nov 25, 2017 8:35 pm
1

2
19 Replies

6174 Views

Last post by myid
Thu Nov 30, 2017 1:14 pm
How to complete the pending IRP immediately?

Last post by myid « Mon Nov 27, 2017 9:06 am
Replies: 2
by myid » Mon Nov 27, 2017 6:59 am

2 Replies

2436 Views

Last post by myid
Mon Nov 27, 2017 9:06 am
WIN64 Driver Development Basic Tutorial

Last post by myid « Sun Nov 26, 2017 4:47 am
Replies: 19
by m5home » Fri Jun 13, 2014 9:18 am
1

2
19 Replies

32506 Views

Last post by myid
Sun Nov 26, 2017 4:47 am
Invalid ProcessId in LoadImageNotifyRoutine

Last post by Brock « Wed Nov 22, 2017 1:28 pm
Replies: 2
by InUrFace » Tue Nov 21, 2017 1:12 pm

2 Replies

2930 Views

Last post by Brock
Wed Nov 22, 2017 1:28 pm
Hook kequeryperformancecounter & play a music

Last post by pboy0922 « Wed Nov 15, 2017 3:42 pm

by pboy0922 » Wed Nov 15, 2017 3:42 pm

0 Replies

2716 Views

Last post by pboy0922
Wed Nov 15, 2017 3:42 pm
The NT Insider: July/August 2015 Issue

Last post by Vrtule « Tue Oct 03, 2017 6:50 pm
Replies: 7
by rkhunter » Fri Mar 22, 2013 7:47 am

7 Replies

24250 Views

Last post by Vrtule
Tue Oct 03, 2017 6:50 pm
Some create process notifications cannot be removed

Last post by tangptr « Tue Oct 03, 2017 4:39 pm
Replies: 6
by myid » Mon Oct 02, 2017 1:16 am

6 Replies

7029 Views

Last post by tangptr
Tue Oct 03, 2017 4:39 pm
How to map an address on specified 4GB space?

Last post by fsdhook « Sun Sep 24, 2017 4:11 pm
Replies: 2
by fsdhook » Wed Sep 13, 2017 3:07 am

2 Replies

8730 Views

Last post by fsdhook
Sun Sep 24, 2017 4:11 pm
process id type

Last post by Vrtule « Sat Sep 09, 2017 8:49 am
Replies: 5
by grechkoed » Fri Jun 09, 2017 2:56 pm

5 Replies

9274 Views

Last post by Vrtule
Sat Sep 09, 2017 8:49 am
Very Simple Question: How to read any kernel address safely?

Last post by myid « Sun Sep 03, 2017 2:31 am
Replies: 7
by myid » Tue Jul 18, 2017 6:23 am

7 Replies

11038 Views

Last post by myid
Sun Sep 03, 2017 2:31 am
Reading pageable memory at HIGH_LEVEL

Last post by Vrtule « Sat Sep 02, 2017 2:38 pm
Replies: 3
by pwl » Fri Jul 07, 2017 6:22 pm

3 Replies

5887 Views

Last post by Vrtule
Sat Sep 02, 2017 2:38 pm
Exception handling in dynamic allocated x64 code

Last post by grechkoed « Thu Jul 27, 2017 3:02 pm

by grechkoed » Thu Jul 27, 2017 3:02 pm

0 Replies

3601 Views

Last post by grechkoed
Thu Jul 27, 2017 3:02 pm
Paging structures for win7/win10 64bit

Last post by pwl « Fri Jul 07, 2017 6:02 pm
Replies: 2
by pwl » Tue Jul 04, 2017 6:31 am

2 Replies

4522 Views

Last post by pwl
Fri Jul 07, 2017 6:02 pm
remove protection csrss system hang?

Last post by Brock « Thu Jun 22, 2017 8:36 pm
Replies: 2
by nullpointer » Sun May 21, 2017 9:11 am

2 Replies

14858 Views

Last post by Brock
Thu Jun 22, 2017 8:36 pm

Return to Board Index