I am currently looking for cool & interesting university or college course. If you have any information, feel free to contact me..


20Apr

Samba eXPerience conference - Germany

Blogging, Law, Presentations, Programming

Day 1 :: Workshop
8.00 PM (yeah it’s late)
I had almost 7 hours of time travel in Train from Paris to Goettigen. It was really exhausting but it was a good opportunity to talk with pretty girls visiting Europa :)
This year, SambaXP conference hold in Freizeit Hotel (Free time in English) in Goettingen (Germany) from […]

06Apr

Few words about Microsoft interoperability initiative.

Blogging, Debugging, Programming, Reverse Engineering, SandMan, Windows

As you probably know, Microsoft released last month several thousands pages of documentation about office file format and Windows protocols.
It means numerous hundreds(thousands?) of functions/algorithms documentation and pseudo-code. But, are these pseudo-function right? It looks not.
While I was reading [MS-DRSR]: Directory Replication Service (DRS) Remote Protocol Specification, I was a bit […]

26Feb

SandMan 1.0.080226 is out!

Articles, Programming, Reverse Engineering, Windows

Since Windows 2000, Microsoft provides a feature called Hibernation also know as suspend to disk that aims to save the system state into an undocumented file called hiberfil.sys. This file contains all the physical memory saved by the Operating System and aims to be restored by the user the next time the computer is powered […]

15Dec

First commit @ TinyKrnl !

Blogging, Programming, Reverse Engineering, TinyKRNL

Hi there!
I’m proud to announce I did my first commit for tinykrnl !
http://svn.reactos.ru/svn/tinykrnl?view=rev&revision=729
Cheers,

10Dec

IDTGuard v0.1 December, 2005 Build

Programming, Reverse Engineering, Windows

This is a very interessting tool I did one year ago to realize proof of concept of my IDT authenticity theory.
Tool can be found at : IDTGuard v0.1
Note: This tool doesn’t work with Windows 2003 SP1 cause I used \\PhysicalMemory. (http://technet2.microsoft.com/WindowsServer/en/library/e0f862a3-cf16-4a48-bea5-f2004d12ce351033.mspx?mfr=true
The following paste is a sample of use with the 0×2D interrupt on Windows 2000.
Interrupt […]