Windows Vista and unexported kernel symbols (Part II, 32bits version)

Posted by Matthieu Suiche on January 31, 2007 · 1 Comment 

This paper exposes part II of my previous article about Windows Vista and internals structures. This one is talking about the 32bits version and aims to show new authencity tricks.

Download it from the following link:
Windows_Vista_32bits_and_unexported_kernel_symbols.pdf

Cheers,

Filed under Articles, Reverse Engineering, Windows · Tagged with

Windows Vista 64-bits and unexported kernel symbols.

Posted by Matthieu Suiche on January 1, 2007 · 2 Comments 

Hi,

I’m gonna published my (the?) first paper of the year 2007 !! :)

This article is talking about Windows Vista 64bits and its system structures which are proteged against rootkit. I also explain how these structures can be authentified without Pathguard.

Windows Vista 64bits and unexported kernel symbols.pdf

Happy New Year !!!

Filed under Articles, Reverse Engineering, Windows · Tagged with