Intro Recently on a penetration test my team and I discovered several JDWP ports open. The Java Debug Wire Protocol (JDWP) is "[…] used for communication between a debugger and the Java virtual machine (VM) which it debugs." So tl;dr: You can connect to a remote or local JVM over various protocols, break/suspend threads, and run code in the context of the suspended thread(s). Public tooling…
Intro Rabbit holes, am I right? The purpose of my small project was to understand the inner workings of the kernel that are responsible for translating a UMVA into the PA. After finishing up my OSR class recently, I wanted to know more about how VADs actually worked under the hood, and how the kernel leverages them to describe the PTEs associated with a section. I wanted to understand how, and by…
The Windows fiber API has been described as one of the “most elegant” APIs available to the Windows programmer for manual execution scheduling. I’m by no means an expert in how fibers work, nor how to deploy them into a large-scale application. There is not a lot of documentation about how fibers work internally, so I thought it might be at least interesting or helpful to write…