Windows Internals

All posts tagged - Windows Internals
ComoDoS - Exploiting a Remote Kernel Vulnerability in Comodo Internet Security
Offensive Security Windows Internals Malware

ComoDoS - Exploiting a Remote Kernel Vulnerability in Comodo Internet Security

Sometimes firewall stops attackers, sometimes attackers stop firewall. analyzing a zero-day vulnerability in Comodo Internet Security's Firewall driver.
Passively Downloading Malware Payloads Via Image Caching
Offensive Security Windows Internals Malware

Passively Downloading Malware Payloads Via Image Caching

Detailing an improved Cache Smuggling technique to turn 3rd party software into passive malware downloader.
CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6
Vulnerability Research Windows Internals

CVE-2024-38063 - Remotely Exploiting The Kernel Via IPv6

Performing a root cause analysis & building proof-of-concept for CVE-2024-38063, a CVSS 9.8 Vulnerability In the Windows Kernel IPv6 Parser
Bypassing EDRs With EDR-Preloading
Programming Windows Internals Malware

Bypassing EDRs With EDR-Preloading

Evading user mode EDR hooks by hijacking the AppVerifier layer
Silly EDR Bypasses and Where To Find Them
Programming Windows Internals Malware

Silly EDR Bypasses and Where To Find Them

Abusing exception handlers to hook and bypass user mode EDR hooks.
An Introduction to Bypassing User Mode EDR Hooks
Programming Windows Internals Malware

An Introduction to Bypassing User Mode EDR Hooks

Understanding the basics of user mode EDR hooking, common bypass techniques, and their limitations.
Windows 10 System Call Stub Changes
Windows Internals

Windows 10 System Call Stub Changes

Bootkit Disk Forensics – Part 3
Analysis Windows Internals Malware

Bootkit Disk Forensics – Part 3

Bootkit Disk Forensics – Part 2
Analysis Windows Internals Malware

Bootkit Disk Forensics – Part 2

Bootkit Disk Forensics – Part 1
Analysis Windows Internals Malware

Bootkit Disk Forensics – Part 1

Virtual File Systems for Beginners
Explainers Windows Internals

Virtual File Systems for Beginners

The 0x33 Segment Selector (Heavens Gate)
Explainers Windows Internals

The 0x33 Segment Selector (Heavens Gate)