The Curious Engineer

All blogs / Windows internals

Alex Ionescu’s Blog

alex-ionescu.com

Windows Internals, Thoughts on Security, and Reverse Engineering

Windows internalsSecurityReverse engineering

’10’15’20’25
Posts
70 from 7 Nov 2006 to 27 Jan 2019
Posting
quiet since 2019
Kind
personal blog
Feed
https://www.alex-ionescu.com/feed/

2019 2

  1. Writing a Hyper-V “Bridge” for Fuzzing — Part 2 : Hypercalls & MDLs
  2. Writing a Hyper-V “Bridge” for Fuzzing — Part 1: WDF

2018 1

  1. Dynamic Tracing in Windows 10 19H1

2017 2

  1. Bringing Call Gates Back
  2. Windows Internals, 7th Edition!

2016 1

  1. Owning the Image Object File Format, the Compiler Toolchain, and the Operating System: Solving Intractable Performance Problems Through Vertical Engineering

2015 4

  1. Closing “Heaven’s Gate”
  2. What are Little PatchGuards Made Of?
  3. Analyzing MS15-050 With Diaphora
  4. How Control Flow Guard Drastically Caused Windows 8.1 Address Space and Behavior Changes

2014 3

  1. Sheep Year Kernel Heap Fengshui: Spraying in the Big Kids’ Pool
  2. PE Trick #1: A Codeless PE Binary File That Runs
  3. The Case Of The Bloated Reference Count: Handle Table Entry Changes in Windows 8.1

2013 4

  1. Protected Processes Part 3 : Windows PKI Internals (Signing Levels, Scenarios, Root Keys, EKUs & Runtime Signers)
  2. The Evolution of Protected Processes Part 2: Exploit/Jailbreak Mitigations, Unkillable Processes and Protected Services
  3. The Evolution of Protected Processes Part 1: Pass-the-Hash Mitigations in Windows 8.1
  4. KASLR Bypass Mitigations in Windows 8.1

2011 1

  1. New Security Assertions in “Windows 8”

2009 1

  1. Windows Internals 5th Edition, at last!

2008 7

  1. Co-Authoring Windows Internals 5th Edition
  2. Black Hat 2008 Wrap-up
  3. Inside Session 0 Isolation and the UI Detection Service – Part 2
  4. Inside Session 0 Isolation and the UI Detection Service – Part 1
  5. Building the Lego Millennium Falcon: A Lesson in Security?
  6. ScTagQuery: Mapping Service Hosting Threads With Their Owner Service
  7. MemInfo: Peer Inside Memory Manager Behavior on Windows Vista and Server 2008

2007 31

  1. Behind Windows x64’s 44-bit Virtual Memory Addressing Limit
  2. Some Vista Tips & Tricks
  3. My Summer At Apple
  4. Purple Pill: What Happened
  5. Introducing Haute Secure
  6. Secrets of the Application Compatilibity Database (SDB) – Part 4
  7. A New Direction
  8. Secrets of the Application Compatilibity Database (SDB) – Part 3
  9. Secrets of the Application Compatilibity Database (SDB) – Part 2
  10. Secrets of the Application Compatilibity Database (SDB) – Part 1
  11. New Object Manager Filtering APIs
  12. Finally Legal!
  13. Good Discussion on Protected Processes
  14. Introducting D-Pin Purr v1.0 – 32bit Edition
  15. Why Protected Processes Are A Bad Idea
  16. The Interview Experience at Top IT Companies.
  17. Interviewing at Apple, Google and Microsoft
  18. Vista DRM Issue Aftermath
  19. Talk at University of Waterloo
  20. Rebooting from Kernel Mode
  21. RtlRemoteCall
  22. WordPress 2.1 Server Upgrade
  23. Part 3 of User-Mode Debugging Internals
  24. Recent Events
  25. Update on Driver Signing Bypass
  26. Windows Vista 64-bit Driver Signing/PatchGuard Workaround
  27. Back from CUTC
  28. Solution to Challenge
  29. MASM 8.0 Free Again!
  30. Challenge of the Week (Month?)
  31. Heap Tagging is Broken

2006 13

  1. DR (Debug Register) Safety/Reliability and Accounting Features in Windows 2003
  2. GCC and Vista Incompatibility
  3. Why Io/NtCreateFile Fails…
  4. News and Todos…
  5. New Version of SDbgExt released!
  6. Interview
  7. Blogroll and Publications
  8. Win32 Calling Conventions Review
  9. Using spaces in your TARGETLIBS path
  10. Part 2 of User-Mode Debugging Internals Article
  11. WDK RTM Changes
  12. Microsoft Tools for Power Users/Developers
  13. First Post