Undocumented structures for W2k-Win10

Forum for discussion about kernel-mode development.
vs2099
Posts: 10
Joined: Wed Jul 17, 2013 2:45 am

Re: Undocumented structures for W2k-Win7

Post by vs2099 » Wed Jul 17, 2013 2:53 am

good.

p4r4n0id
Posts: 126
Joined: Thu Sep 22, 2011 11:36 am
Location: Israel
Contact:

Re: Undocumented structures for W2k-Win7

Post by p4r4n0id » Tue Jul 23, 2013 7:02 pm

Any chance to have it as well for win32k.sys file?
Keep Low. Move Fast. Kill First. Die Last. One Shot. One Kill. No Luck. Pure Skill.
http://p4r4n0id.com/

User avatar
EP_X0FF
Global Moderator
Posts: 4811
Joined: Sun Mar 07, 2010 5:35 am
Location: Russian Federation
Contact:

Re: Undocumented structures for W2k-Win7

Post by EP_X0FF » Sat Jul 27, 2013 6:22 am

p4r4n0id wrote:Any chance to have it as well for win32k.sys file?
Which particular structure/declaration you are looking for? I'm afraid even in PDB files there not so many useful info regarding win32k.
Ring0 - the source of inspiration

User avatar
rkhunter
Posts: 1155
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Undocumented structures for W2k-Win7

Post by rkhunter » Fri Sep 13, 2013 2:37 pm

Windows 8.1 RTM (ntoskrnl 6.3.9600.16384 symbols)
.h + .idc in attach
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1155
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Undocumented structures for W2k-Win7

Post by rkhunter » Thu Oct 02, 2014 3:17 pm

Windows 10 TP (ntoskrnl 6.4.9841.0 symbols)
.h file in attach
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1155
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Undocumented structures for W2k-Win7

Post by rkhunter » Thu Apr 30, 2015 10:42 am

ntoskrnl 10.0.10074.1 types & structures (header file) .
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1155
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Undocumented structures for W2k-Win10

Post by rkhunter » Sun Apr 10, 2016 5:27 pm

[10.0.14316] ntoskrnl + ntdll + hal types & structures
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1155
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Undocumented structures for W2k-Win10

Post by rkhunter » Thu Mar 02, 2017 10:34 am

Windows 10 Redstone 1 (1607) ntoskrnl (10.0.14393.693) pdb + extracted structures.
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1155
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Undocumented structures for W2k-Win10

Post by rkhunter » Wed Jun 21, 2017 10:30 am

Windows 10 Redstone 2 (1703) ntoskrnl (10.0.15063.413) pdb + extracted structures.
You do not have the required permissions to view the files attached to this post.

User avatar
rkhunter
Posts: 1155
Joined: Mon Mar 15, 2010 12:51 pm
Location: Russian Federation
Contact:

Re: Undocumented structures for W2k-Win10

Post by rkhunter » Fri Oct 20, 2017 7:30 pm

Windows 10 Redstone 3 (1709) ntoskrnl (10.0.16299.15) pdb + extracted structures.
You do not have the required permissions to view the files attached to this post.

Post Reply