The Curious Engineer

All blogs / Security

Minutes on

matteomalvica.com/minutes

Recent content in Minutes on

SecurityReverse engineeringWindows internals

’05’10’15’20’25
Posts
21 from 1 Jan 2001 to 5 Jun 2024
Posting
quiet since 2024
Kind
personal blog
Feed
https://www.matteomalvica.com/minutes/index.xml
Also at
https://matteomalvica.com/blog
Also at
https://matteomalvica.com/

2024 1

  1. An Introduction to Chrome Exploitation - Maglev Edition Jun 5

2022 2

  1. Bypassing Intel CET with Counterfeit Objects Sep 22
  2. IRQLs Close Encounters of the Rootkit Kind Jan 3

2021 3

  1. Work Items & System Worker Threads - 'Practical Reverse Engineering' solutions - Part 3 Mar 10
  2. System Threads and their elusiveness. 'Practical Reverse Engineering' solutions - Part 2 Feb 11
  3. Linked List in the Kernel: 'Practical Reverse Engineering' solutions - Part 1 Jan 1

2020 6

  1. Kernel exploitation: weaponizing CVE-2020-17382 MSI Ambient Link driver Sep 24
  2. Silencing the EDR. How to disable process, threads and image-loading detection callbacks. Jul 15
  3. Distrusting the patch: a run through my first LPE 0-day, from command injection to path traversal May 21
  4. The universal antidebugger, x64 revamped Apr 10
  5. heappo: a WinDBG extension for heap tracing Mar 24
  6. Uncovering Mimikatz 'msv' and collecting credentials through PyKD Jan 20

2019 8

  1. Evading WinDefender ATP credential-theft: a hit after a hit-and-miss start Dec 2
  2. Monitoring linux system-calls the right way Nov 18
  3. Windows Kernel Shellcodes - a compendium Jul 6
  4. Converting win shellcode from msfvenom to FASM Jun 13
  5. Injecting shellcode into x64 ELF binaries May 18
  6. Baffling objdump Apr 17
  7. Practical Binary Analysis - Chapter 5 - CTF walkthrough level 7 Mar 31
  8. Practical Binary Analysis - Chapter 5 - CTF walkthrough level 6 Mar 25

2001 1

  1. [windows] kernel internals