Learn how to set up a development testing environment for writing Windows kernel-mode drivers using Hyper-V, WinDbg, and Visual Studio.  Cover the basic anatomy of a driver from loading and unloading, I/O control codes, interaction from userland, and kernel debugging.  Implement various abuse primitives including removing process protection, disabling kernel callback routines and driver signature enforcement.

Course Curriculum

  1. 1
  2. 2
    • Introduction

    • Unprotecting (Protected) Processes

    • Protecting (Unprotected) Processes

    • Windows Version Checking

  3. 3
    • Introduction

    • nt!_TOKEN

    • PsReferencePrimaryToken

  4. 4
    • Introduction

    • PsSetCreateProcessNotifyRoutine

    • PspCreateProcessNotifyRoutine

    • QueryModuleInformation

    • Putting It Together

    • CreateThreadNotify & LoadImageNotify

    • Removing a Callback Routine

  5. 5
    • Introduction

    • CI!CiInitialize

    • Finding CiOptions from Userland

    • Toggle DSE from a Driver

    • Testing DSE

  6. 6

Student Reviews

4 star rating

good

Israel Enriquez

I think is great you develop this type of content

I think is great you develop this type of content

Read Less
5 star rating

Awesome Content

Daniel Feichter

Awesome and very detailed driver dev. content

Awesome and very detailed driver dev. content

Read Less

Pricing Options

Pay in one go or spread the cost with a payment plan.