Windows (en)

Notes on Useful GFlags Settings for Troubleshooting Windows Environments

This article summarizes useful GFlags settings to remember when troubleshooting Windows. It covers settings such as debugger flags and Silent Process Exit that can help when investigating issues on Windows.

Enumerating Process Information in the System with Win32 API

I tried enumerating process information in the system using Win32 API.

Notes on Reading Windows Process Information with WinDbg

Notes on reading Windows process information with WinDbg. This article covers topics such as the EPROCESS structure and process manipulation using WinAPI, with more content planned for the future.

Cheat Sheet for Dump Analysis and Live Debugging with WinDbg

A cheat sheet summarizing the WinDbg commands I often use personally. I plan to add more content in the future.

Writing a Windows Kernel Driver from Scratch and Inspecting IRP Requests with WinDbg

Reversing a Windows Sockets TCP/UDP Communication Program

Implementing RC4 Encryption in C and Reversing It with Ghidra and WinDbg

Analyzing a Base64 Program Implemented in C with WinDbg Time Travel Debugging

Building a Custom Windows Kernel Driver and Analyzing It with WinDbg

Notes on Building an Active Directory Lab Environment: Steps and Troubleshooting

How to Generate Symbol Files (.pdb) in a Linux Environment Using llvm-mingw

Overwriting the Memory Pointed to by the Stack Pointer in WinDbg to Execute an Arbitrary Function