Archive

Windows Process & Thread Internals: EPROCESS, KTHREAD & Exploitation

Windows Memory Management Internals: Virtual Memory, Page Tables & Exploitation

Windows Architecture Deep Dive: User Mode vs Kernel Mode

Meterpreter Life Cycle

Repurposing remote desktop application as a strategic exploit

Windows Internals: The Art of Self-Deletion

Windows Internals: A Look at Callback Functions

Dropper with C++

Remote PE Loading

The Dark Arts of PE Loading in Windows