Windows Kernel Hacking

XXX there is more to dump here!

Kernel Internals

• Kernel Internals Lecture Notes from Tokio University
• Page Directory Entry and Page Table Entry i386 Windows XP (SP2)
• OSR Online
• Undocumented

Techniques, Papers

• Piotr Bania
• Reverse Mode
• OpenRCE
• Uninformed
• Rootkit.com

Shellcode KB

• Metasploit Opcode Database
• Metasploit Syscall Table
• Known Portable Base Addresses

Exploit Examples

• WinPcap NPF.SYS

Assembly KB

• x86 Opcode and Instruction Reference
• Iczelion’s Win32 Assembly
• x86 Reference

Tools

• Kartoffel
• PaiMei: OpenRCE Download OpenRCE Website Google Code Docs Pai Mei Description
• ioctlizer
• OSR IrpTracker
• OSR DeviceTree
• WinObj
• Sysinternals Process Explorer
• OllyDbg – OllyDbg Reference
• IDA Pro – IDA Pro Reference
• Immunity Debugger
• Bindiff et al
• WinDBG
  • Symbol Type Viewer
  • Serial Debugging with WinDbg and VMware
  • WindPL Perl Interface to Windows /DEBUG
• DDK/SDK
  • Windows DDK Reference

---

Back to Knowledge Base.