mgostIH Expert Cheater Reputation: 3
Joined: 01 Jan 2016 Posts: 159
|
Posted: Fri Feb 24, 2017 12:17 pm Post subject: Where to start with Windows Kernel Drivers? |
|
|
Hello, I've been reverse engineering a lot of userland code, learning a lot about how Windows handles the PE header, system calls and such.
I have absolutely no problem at coding a program entirely in assembly, but I have no idea on how to start with learning to make and use kernel drivers.
To my knowledge, kernel drivers can be thought of as applications that can run and be called just like a regular process, with the difference being that they require a signature, have much more control over the computer than user mode processes do and run in a NATIVE subsystem.
So, coming from a background of gamehacking and reverse engineering, I'd thought that learning how to make and handle drivers would be a huge boost towards my skills, but I don't have particular interests in using them to interface with specific hardware.
What tutorial would you reccomend for learning kernel drivers in detail, yet having practical applications, such as modifying a process memory or kernel structure (ETHREAD or EPROCESS)?
_________________
|
|