Cisco switches (running IOS) have plenty of features that are critical to modern networks. Some are Cisco security features that eliminate several important attack vectors on layer 2. This is arg...
Inside Windows Page Frame Number (PFN) - Part 1
Introduction (Page Frame Number) Windows and almost all the OSs use Page Frame Number Database in order to have a track of virtually allocated pages to know which page must be freed or evicted o...
Captive portal detection with a working sample in all major OSs!
Hi everyone I’ve been working on a project which involves a developing a captive portal system from scratch. and I’m going to gradually post more of challenges we faced and the way we solved them...
Defeating malware's Anti-VM techniques (CPUID-Based Instructions)
[The picture of this post is taken by one of my best friends, Ahmad Ghazi in Chitgar Lake !] Introduction You should by now be aware of everything, cause the topic’s title clearly describes the...
PyKD Tutorial - part 2
The content of this post is the second part of PyKD Tutorials, so make sure to read this topic first, then continue reading this topic. Breakpoints Breakpoints are such useful things and can gi...
PyKD Tutorial - part 1
Using windbg script syntax is such annoying thing that almost all reverse engineers have problems dealing with it but automating debugging gives such a power that can’t be easily ignored. A good ...
Active Directory Certificate Services Overview and Migration
Active Directory Certificate Services Active Directory Certificate Services (AD CS) is a role in Windows Server which allows you to fully implement a PKI infrastructure. AD CS also provides temp...
Bochs Emulator - Debug & Instrument
There is also another post about configuring and building Bochs on Windows & OS X if you have a problem compiling Bochs, take a look at here! In my opinion, Bochs is an amazing thing because...
Bochs Emulator - Config & Build on Windows and OS X
Introduction Bochs is an x86 - x86-64 multiplatform emulator that provides emulation of CPU Instruction Fetching without using Hypervisor technologies like Intel’s VT-x and AMD-V. One of the be...
A partial survey among non-general purpose registers
Hi guys, In the past few days, I was searching about non-general purpose register then I saw the following pictures that give me a new idea of posting about the non-general purpose registers. T...
- Hypervisor From Scratch – Part 5: Setting up VMCS & Running Guest Code
- Hypervisor From Scratch – Part 6: Virtualizing An Already Running System
- Hypervisor From Scratch – Part 7: Using EPT & Page-Level Monitoring Features
- Hypervisor From Scratch – Part 8: How To Do Magic With Hypervisor!
- Hypervisor From Scratch - Part 1: Basic Concepts & Configure Testing Environment