OpenRCE

About Articles Book Store Distributed RCE Downloads Event Calendar Forums Live Discussion Reference Library RSS Feeds Search Store Users What's New

Customize Theme

Flag: Tornado! Hurricane!

Error: Authentication required to access requested resource.

Article Abstract In part three of this three part article series, the kernel-mode interface to Windows debugging is dissected in detail. The reader is expected to have some basic knowledge of C and general NT Kernel architecture and semantics. Also, this is not an introduction on what debugging is or how to write a debugger. It is meant as a reference for experienced debugger writers, or curious security experts. The reader is expected to have some basic knowledge of C and general NT Kernel architecture and semantics. Also, this is not an introduction on what debugging is or how to write a debugger. It is meant as a reference for experienced debugger writers, or curious security experts.

Full Article ...

Printer Friendly ...

Article Comments

JasonGeffner	Posted: Thursday, February 1 2007 13:56.34 CST
Awesome job! I want a "part four"! :)

MohammadHosein	Posted: Thursday, February 1 2007 15:29.03 CST
thank you for these excellent series of articles

anonymouse	Posted: Thursday, February 1 2007 23:35.29 CST
so this is how some of the functions in syser operates getting one access to r0 as well as r3 mode in a single debugger thanks a lot its as usual highly informative :thumbsup: :yay

flyingkisser	Posted: Tuesday, January 15 2008 20:17.43 CST
very good,very powerful!So,where is part I and part II?

praveendarshanam	Posted: Friday, September 18 2009 15:18.19 CDT
good articles!! all partz r amazing!!!

There are 16,646 total registered users.

Recently Created Topics
SSL keyfindert plugi...	Mar/15
ApiHooks.com down	Mar/15
how to crate a PATC...	Mar/10
wsnpoem audio.dll	Mar/09
suggestions - RE tra...	Mar/09
Requesting Suggestio...	Mar/06
Force enable debug p...	Mar/05
upgrading new image ...	Mar/03
upgrading new image ...	Mar/03
upgrading new image ...	Mar/03

Recent Forum Posts
suggestions - RE tra...	enm16
wsnpoem audio.dll	zhane
suggestions - RE tra...	Silkut
how to crate a PATC...	Silkut
suggestions - RE tra...	RolfRolles
wsnpoem audio.dll	debbie
Requesting Suggestio...	secursig
Requesting Suggestio...	phn1x
how to get executabl...	RabidCi...
how to get executabl...	RabidCi...

Recent Blog Entries
	RolfRolles	Mar/08
Compiler Optimizations for ...
	ReWolf	Mar/04
When memory management goes...
	thesprawler	Feb/20
log1949.txt -- Wondering ho...
	thesprawler	Feb/20
log1949.log -- created on C...
	thesprawler	Feb/17
Trying to reverse the firmw...
More ...

Recent Blog Comments
	Boken on:	Mar/12
Compiler Optimizations for ...
	wildinto on:	Mar/10
Compiler Optimizations for ...
	Orr on:	Mar/10
Compiler Optimizations for ...
	bughoho on:	Mar/09
Compiler Optimizations for ...
	cliffwolf on:	Mar/08
Compiler Optimizations for ...
More ...

Imagery

SoySauce Blueprint
Jun 6, 2008

[+] expand

View Gallery (11) / Submit