Intricacies of WDF - Part 2
Calling WDF functions before WdfDriverCreate is a bad idea.
Blog - www.dennisbabkin.com
Blog posts published by www.dennisbabkin.com. The topics range from programming, security, research, reverse engineering, as well as some other unrelated subjects.
Latest posts
Scams and Fraud Galore - opusv.com.au
OpusV, evasive bill payment practices and ghosting developers.
Reverse Engineering - Resolving Confusion Over PsGetCurrentProcess, PsGetCurrentProcessId and PsGetProcessId
Using WinDbg to understand dependency between KPCR, KPRCB, K/ETHREAD, K/EPROCESS and KAPC_STATE structures.
Reverse Engineering - SHStrDup* Function
Reverse engineering the SHStrDupW function with WinDbgX to prevent a potential memory leak.
Intricacies of WDF - Part 1
Difference between EvtCleanupCallback and EvtDestroyCallback.
Windows Kernel Stack is a Precious Little Resource
EXCEPTION_DOUBLE_FAULT and the UNEXPECTED_KERNEL_MODE_TRAP (7f) bugcheck.
Can I install the StarLink internet antenna in an apartment?
StarLink antenna in a balcony, length of cable, acceptable obstructions, connection speeds and latency, use outside of the US.
Insane Code Flow in Async JavaScript
What happens under the hood of "asynchronous" JavaScript: await, async, Promise, then.
Reverse Engineering Virtual Functions Compiled With Visual Studio C++ Compiler - Part 1
Understanding virtual function tables, vtable, __purecall, novtable, Control Flow Guard.
Windows Authentication - Credential Providers - Part 2
Sequence of calls to a credential provider in Windows.
Windows Authentication - Credential Providers - Part 1
A primer on writing a credential provider in Windows.
Secure Programming Practices - Serialization
Example of secure binary serialization and de-serialization in C++.
Trusted Platform Module in Windows - Part 1
How to use TPM to encrypt and decrypt small blobs of data programmatically.
Reverse Engineering - Stepping Into a System Call
How to step into a SYSCALL with a debugger using kernel binary patch.
Native Functions To The Rescue - Part 1
How to make a critical process that can crash Windows if it is closed.
Shaky Windows All The Way
How to perform "title bar window shake" programmatically in Windows.
Critical Section vs Kernel Objects
Spinning in user-mode versus entering kernel - the cost of a SYSCALL in Windows.
Things You Find While Reverse Engineering - AlertByThreadId
How to put a thread into a kernel wait state and how to wake it up by a thread ID.
Nuances of a Process Harakiri in Windows
What is the shutdown-in-progress state of a process?
Reverse Engineering & Binary Augmentation - Snipping Tool
Screencasts of the reverse engineering process to make binary patches to modify discontinued Microsoft Snipping Tool.
Reverse Engineering - Tips For Beginners
What do you need to become a software reverse engineer?
Reverse Engineering - VM Setup - Windows
How to set up a virtual machine for your reverse engineering work on Windows.
Reviews On Major Platforms
Most reviews that you find online are probably cherry-picked and fake.
What Not to Do - Coding Apps in Assembly & Timely Backups
Batty, a game coded almost entirely in Assembly, plus importance of timely backups.
So You Want to Code-Sign macOS Binaries?
How to get a certificate, the process of code-signing & notarization of macOS binaries for distribution outside of the Apple App Store.
Tips For macOS Programming - Part 3
Xcode build schemes, diagnosing memory corruption and crashes, sanitizers in Xode, analyzing crash logs.
Tips For macOS Programming - Part 2
Shutdown/reboot/logoff notifications, sleep/wake notifications, sending macOS to sleep or setting a wake event, rebooting or shutting down.
Tips For macOS Programming - Part 1
Critical sections, reader/writer locks, interactive login sessions, root user detection, CFString conversion.
Mach Messages in macOS
Example of low-level inter-process communication (IPC) in C++ using Mach messages.
Software Vulnerabilities - "Beg Bounty" Hunters
Recent proliferation of fake bug bounty hunters and "vulnerability racketeers".
Scams and Fraud Galore - Spokeo
Deceptive practices and hidden charges of personal data scrapers & content aggregators.