#windowsinternals search results

Windows Internals article sh3ll.cloud/xf2/threads/43… #windowsdevelopment #windows #windowsinternals

Sharing is caring 🫶 Excellent write-up on MSRPC #exploitdevelopment. Clear breakdowns and great insights for anyone working in #WindowsInternals or offensive engineering. incendium.rocks/posts/Exploit-… From the #Hackcraft #RedTeaming team with love! #CyberSecurity #InfoSec #RedTeam

Red vs Blue never stops evolving! 🎯 #CyberSecurity #TryHackMe #WindowsInternals #RedTeam #EDR #ProcessInjection Check out the room: lnkd.in/gMyRkfVb

Want to understand how Windows handles authentication and access tokens? Security analyst @emanuelduss explains how they’re created, used, and abused - with live demos. 🎥Presentation: youtu.be/_ODdwpxXRR4?si… #Security #Pentest #WindowsInternals

So next time your debugger mentions “relocation table” or “base address,” just picture Windows moving books around on a crowded desk and rewriting their tables of contents so no chapters get lost. 🧠💻 #WindowsInternals #PE #ReverseEngineering #SystemsProgramming

🧠 Core Windows Architecture Understanding Windows Internals isn’t optional — it’s survival. 🔹 Kernel & User Mode 🔹 Processes & Threads 🔹 System Calls & Handles If you don’t know how Windows runs, you’ll never know how it breaks. #CyberSecurity #WindowsInternals

New video: Inside Windows Sessions with @zodiacon. Learn how Windows manages processes, desktops & security inside sessions. trainsec.net/library/window… #WindowsInternals #CyberSecurity #TrainSec

6️⃣ Commit ≠ Working Set. Commit = memory apps asked for. Working Set = what’s in RAM now. High commit doesn’t mean “out of memory.” Check with RamMap. 📊 #WindowsInternals #Memory

3️⃣ 100% CPU but no clear culprit? 🔥 Run !runaway in WinDbg. 👉 Often it’s 1 runaway thread hogging cycles, not “the system.” #Debugging #WindowsInternals

1️⃣ Memory leaks ≠ high RAM usage. Windows caches memory aggressively. 🚀 👉 The real issue is Private Bytes climbing without release. Use PoolMon or WinDbg !vm. #WindowsInternals #Debugging

Just finished a new whitepaper: COMouflage – COM-based DLL Surrogate Injection I tested the technique against three major EDRs: - Microsoft Defender – bypassed - Palo Alto Cortex XDR – bypassed - SentinelOne – bypassed github.com/zero2504/COMou… #malware #COM #windowsinternals

Custom Windows shellcode leverages PEB and TEB structures for stealthy API resolution, dynamic payload control, and detection evasion. Encoding strings as hex keeps payloads self-contained and covert. #WindowsInternals #ShellcodeCraft #USA ift.tt/RukcYeH

و با نوشتن رول در #سوریکاتا، به شناسایی Signature در ترافیک دانلودی پرداختیم. در نهایت این بخش رو به PE Parser اضافه کردیم. مشاهده در یوتیوب: youtu.be/hr0WQaeNJdU?si… اسلاید و کدها: github.com/onhexgroup/Tut… #ویندوز_اینترنالز #WindowsInternals #redteam #Blueteam #PEParser #Lief

ashishranax.com/posts/Threads,… Understanding Threads, TEB, PEB, TLS, and SEH in Windows - and how they connect with each other. #x86 #ReverseEngineering #WindowsInternals

"Contribute to Open Source Software with Me" Bblwrp — pronounced bubble wrap, as in “bubble wrap” or “insulate” your software. Join the fun: github.com/DesignsbyBlanc… #WindowsInternals #IT #Microsoft #opensourcesoftware #softwaredevelopement #programming #cplusplus

Windows memory management is one of the most critical areas of #WindowsInternals!❌ Watch @samilaiho bust some myths around it in this demo from our previous Advanced Windows Security Course 👉 youtube.com/watch?v=CBHYp3… #WindowsSecurity

Just published a article on my blog - Malware Development: 🧠 Process Injection - DLL, Shellcode 🔗 Read here: debug-diary.vercel.app/post/Process_I… Also added hand drawn images for better understanding #MalwareDevelopment #WindowsInternals #Cybersecurity

🛠️ TokenUniverse tool showcase: Admin to TrustedInstaller without spawning the service. #WindowsInternals #TokenUniverse github.com/diversenok/Tok…

PnP device states #WindowsInternals

🧠 Core Windows Architecture Understanding Windows Internals isn’t optional — it’s survival. 🔹 Kernel & User Mode 🔹 Processes & Threads 🔹 System Calls & Handles If you don’t know how Windows runs, you’ll never know how it breaks. #CyberSecurity #WindowsInternals

0x124 MCA Cache #WindowsInternals #WinDBG

Boot phases #WindowsInternals

Old but gold #Threads #WindowsInternals #Debugging #WinDBG

NDIS Architecture #WindowsInternals #Networking

It’s that time of the year again! #offensivecon2020 @offensive_con #WindowsInternals

#Stacks #WinDBG #WindowsInternals

Yet another way of starting the WER Service: use undocumented NtUpdateWnfStateData() with 0x41940b3aa3bc0875 as a parameter. Allowed for anyone. Windows Notification Facility FTW! #wnf #WindowsInternals

New video #WindowsInternals series: "Tracing C function fopen [Part2] - Windbg Kernel Debugging - Walk-Through User-Mode to Kernel Executive Subsytem" and much more... Video: youtu.be/8oaEAPC84gc Walk-Through: git.io/JseF3

Be a regular user, face "Access Denied" when starting a system service, inject false ETW trigger to make it starting anyway. Fully working PoC for wersvc: github.com/gtworek/PSBits… #WindowsInternals #security

Red vs Blue never stops evolving! 🎯 #CyberSecurity #TryHackMe #WindowsInternals #RedTeam #EDR #ProcessInjection Check out the room: lnkd.in/gMyRkfVb

My copy just arrived 😎 #WindowsInternals

Performance Counter Series #6 #WindowsInternals #Perfmon KPIs:

Performance Counter Series #1 #WindowsInternals #Perfmon Counter Structure:

Reverse Engineering Malware, Part 4: Windows Internals #windowsinternals #reversing #dfir #malware #infosec #cyberwarrior bit.ly/3rXXYD3

👀 Think AMSI bypass was wild? Wait until you see what’s in Part 2 🧠 Learn how to defeat: ✅ PowerShell Logging ✅ ETW ✅ SmartScreen ✅ MoTW ✅ C# Reflection ✅ More stealth tricks verylazytech.com/windows/antivi… #AVBypass #RedTeam #WindowsInternals #EDREvasion #OffSec #CyberSecurity

Here is all actions that OS take before shutting down. #WindowsInternals

Tracing iSCSI on Windows Server 2016/2019 through "Event Trace Sessions" #WindowsInternals #Performance