Posts

Debugging DLL, add these after decompile

64-bit _TEB and _PEB example

PEHeader structs

IDA Pro IDC - Memory Dump

C pragma tips

Compile C using gcc for Windows in Ubuntu

Image

Binding a domain to VPN - Windows

Image

One Line Command Prompt that makes a PendingFileRenameOperations entry

Enable group policy editor (gpedit.msc) in Windows

Image

Kernel Debugging with Windbg and IDAPro - Windows 10 target

Analysis with VirtualBox and Volatility