ATTACKING WINDOWS BY WINDOWS
eu-16-Liang-Attacking-Windows-By-Windows
eu-16-Liang-Attacking-Windows-By-Windows
You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Old days..<br />
Q1: Where to write?<br />
• nt!HalDispatchTable<br />
Q2: What to write?<br />
• Userland shellcode address<br />
Q3: What can we do now?<br />
ring3<br />
XXX.exe<br />
ntdll!NtQueryIntervalProfile<br />
ring0<br />
ntoskrnl.exe<br />
nt!NtQueryIntervalProfile<br />
XXX!Shellcode<br />
nt!HalDispatchTable