![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
subverting windows kernel for fun and profit
by Joanna Rutkowska / Advanced Malware Labs
In a nutshell:
- Allocate lots of memory to cause unused drivers code to be paged
- Replace the paged out code (inside pagefile) with some shellcode
- Ask kernel to call the driver code which was just replaced
алсо, powerpoint presentation from microsoft на аналогичную тему.
In a nutshell:
- Allocate lots of memory to cause unused drivers code to be paged
- Replace the paged out code (inside pagefile) with some shellcode
- Ask kernel to call the driver code which was just replaced
алсо, powerpoint presentation from microsoft на аналогичную тему.
no subject
no subject