The following pages and posts are tagged with
| Title | Type | Excerpt |
|---|---|---|
| Anti Kernel Debugging Tutorial | Page | 드라이버를 이용한 커널 디버깅 방지 |
| Anti Kernel Debugging | Page | 안티 디버깅 기법 및 목적 |
| Bypass Introduction | Page | Bypass Introduction |
| Anti Kernel Debugging Bypass | Page | 안티 커널 디버깅 우회(1) |
| ObRegisterCallbacks Debugging | Page | ObRegisterCallbacks Bypass(1) |
| ObRegisterCallbacks Bypass | Page | ObRegisterCallbacks Bypass(2) |
| Code Integrity | Page | 코드 무결성, 코드 서명 |
| Control Debugger | Page | 디버거 제어 드라이버 |
| Kernel Debugging (1) | Page | 커널 디버깅의 원리 (1) |
| Kernel Debugging (2) | Page | 커널 디버깅의 원리 (2) |
| Kernel Debugging (3) | Page | 커널 디버깅의 원리 (3) |
| Kernel Global Variable | Page | 커널 디버깅의 원리 (4) |
| Preferences | Page | 초기 환경설정 |
| Process Protection | Page | 드라이버를 이용한 프로세스 보호 |
| Process Protection | Page | 드라이버를 이용한 프로세스 보호(2) |
| Bugs Overview | Page | Bugs 개요 |
| Documentation Overview | Page | 섹션 개요 |
| PE Header inside | Page | PE 헤더 구조 |
| PE Header introduction | Page | 섹션 개요 |
| C, C++ Programming | Page | C, C++ 프로그래밍 |
| Relocation & IAT | Page | PE 재배치와 IAT |
| Virtual Machine Monitor Basic | Page | The Virtual Machine Monitor Basic |
| VMM Implementation | Page | VMM Implementation |
| Virtual Machine Monitor Introduction | Page | Virtual Machine Monitor Introduction |
| Paging | Page | Paging |
| VMX Address Translation | Page | VMX Address Translation |
| Virtual Machine Control Structure Data | Page | VMCS Data |
| VM Entries -1- | Page | VM Entries |
| VM Entries -2- | Page | VM Entries -2- |
| VM Exits -1- | Page | VM Exits -1- |
| VM Exits -2- | Page | VM Exits -2- |
| VMX Non-Root Operation | Page | VMX Non-Root Operation |
| Shh0ya Rootkit Beta 1.0 | Page | Rootkit Development |
| Shh0ya Rootkit Beta 2.0 | Page | Rootkit Development |
| Shh0ya Rootkit Introduction | Page | Rootkit Development |
| Unreal Engine 4 Dumper | Page | Unreal Engine Name&Object Dumper |
| Unreal Engine 4 SDK Generator | Page | Unreal Engine SDK Generator |
| Unreal Engine Inside | Page | Unreal Engine Dumper Introduction |
| Unreal Engine FName&GObjects | Page | Unreal Engine FName & GObjects |
| VMP Mutation Fix | Page | VMP Mutation 함수 복구 |
| VMP analysis | Page | VMP 동적 및 정적분석 |
| VMProtect Bypass(Anti Debugging) | Page | VMP Anti Debugging |
| VMProtect Introduction | Page | VMP Packer 개요 |
| VMP kernel driver analysis using pykd | Page | pykd를 이용한 패킹 드라이버 분석 |
| Capcom Driver Analysis | Page | Capcom 커널 드라이버 분석 |
| Vulnerability Overview | Page | Vulnerability 개요 |
| SMBGhost(CVE-2020-0796) Analysis -1- | Page | SMBGhost(CVE-2020-0796) 분석(1) |
| SMBGhost(CVE-2020-0796) Analysis -2- | Page | SMBGhost(CVE-2020-0796) 분석(2) |
| SMBGhost(CVE-2020-0796) Exploit(LPE)- | Page | SMBGhost(CVE-2020-0796) Exploit |
| VirtualBox Driver Loader | Page | Virtual Box Driver Mapper 분석 |
| Memory Descriptor List | Page | MDL(Memory Descriptor List) |
| Debugging process | Page | Debugging Process |
| Windows Handle Table & Object | Page | Windows Handle Table & Object |
| Find Hidden Process | Page | Find Hidden Process |
| Windows Internals Introduction | Page | Windows Internals Introduction |
| I/O Control Code | Page | I/O Control Code |
| I/O Transfer Example | Page | I/O Transfer Example |
| I/O Request Packet | Page | I/O Request Packet |
| Hiding Kernel Driver | Page | Hiding Kernel Driver |
| PatchGuard Analysis | Page | Windows PG Analysis |
| PatchGuard Initialize Debugging | Page | PatchGuard 분석 팁(1) |
| PatchGuard Dump Analysis | Page | PatchGuard 분석 팁(2) |
| PatchGuard Initialize -1- | Page | Windows PG Initialize |
| PatchGuard Initialize -2- | Page | Windows PG Initialize |
| PatchGuard Introduction | Page | Windows KPP Introduction |
| PatchGuard Initialization Analysis -1- | Page | Windows PG Initialize Analysis |
| [#] Windows GDB Stub | Post | IDA GDB를 이용한 VMware 커널 디버깅 |
| [#] Kernel Debugging with Vagrant | Post | Vagrant를 이용한 커널 디버깅 |
| [#] Vulnerability&Bugs Update | Post | 취약점&버그 분석 업데이트 |
| [#] Manually Find DriverEntry(Old) | Post | 직접 DriverEntry 찾아가기 |
| [#] LdrLoadDll Hooking(Old) | Post | Detours를 이용한 LdrLoadDll 후킹 |