Offensive Driver Development
Learn how to develop a Windows driver with a variety of abuse primitives.
Learn how to set up a development testing environment for writing Windows kernel-mode drivers using Hyper-V, WinDbg, and Visual Studio. Cover the basic anatomy of a driver from loading and unloading, I/O control codes, interaction from userland, and kernel debugging. Implement various abuse primitives including removing process protection, disabling kernel callback routines and driver signature enforcement.
What is a Driver?
FREE PREVIEWConfigure your Development Environment
FREE PREVIEWDriver Entry
FREE PREVIEWPrinting Debug Messages
FREE PREVIEWLoading and Running the Driver
FREE PREVIEWDriver Unload
FREE PREVIEWDispatch Routines
FREE PREVIEWClient-Side Code
FREE PREVIEWDispatch Device Control
FREE PREVIEWSending Data to the Driver
FREE PREVIEWReturning Data from the Driver
FREE PREVIEWKernel Debugging
FREE PREVIEWIntroduction
Unprotecting Processes
Protecting Processes
Windows Version Check
Introduction
Token Privileges Structure
Enabling Token Privileges
Introduction
PspCreateProcessNotifyRoutine Array
Getting Module Information
Returning Data to the Client
Removing a Callback Routine
Thread & Image Load Notifications
A physical Windows host and another virtual Windows host running inside Hyper-V.
Foundational knowledge would be useful, but not absolutely essential.
I loved it. Thanks to RastaMouse for making it available. I now have a much better understanding of drivers (which I was always interested in but didn't know...
Read MoreI loved it. Thanks to RastaMouse for making it available. I now have a much better understanding of drivers (which I was always interested in but didn't know where to start) and now have a tool I can play around with. Money well spent!
Read LessWell structured and easy to follow. Best introduction to the topic I've found so far.
Well structured and easy to follow. Best introduction to the topic I've found so far.
Read LessI think is great you develop this type of content
I think is great you develop this type of content
Read LessAwesome and very detailed driver dev. content
Awesome and very detailed driver dev. content
Read Less