Kernel (en)

Notes on x86 CPU Memory Protection Mechanisms (GDT and LDT)

While reading UNIX source code, I became curious about the process of transitioning to protected mode during boot, so I've compiled my findings.

Tracing Library Function Calls Through GOT/PLT

This article summarizes the overview of GOT and PLT and presents practical verification results.

Reversing a Windows Sockets TCP/UDP Communication Program

Implementing RC4 Encryption in C and Reversing It with Ghidra and WinDbg

Analyzing a Base64 Program Implemented in C with WinDbg Time Travel Debugging

Building a Custom Windows Kernel Driver and Analyzing It with WinDbg

How to Generate Symbol Files (.pdb) in a Linux Environment Using llvm-mingw

Overwriting the Memory Pointed to by the Stack Pointer in WinDbg to Execute an Arbitrary Function

[WinDbg Preview] A New Debugging Approach with Time Travel Debugging

How to Manually Capture a Kernel Memory Dump on Windows and Analyze It with WinDbg

First Steps for Kernel Debugging a Windows 10 Environment with WinDbg

How to set up kernel-mode debugging with WinDbg on Windows 10 using Hyper-V or VirtualBox, and perform basic kernel debugging operations.

Trying the WinDbg User-Mode Debugging Tutorial