Showing posts with label double pulsar. Show all posts
Showing posts with label double pulsar. Show all posts

Friday, June 23, 2017

Loading and Debugging Windows Kernel Shellcodes with Windbg. Debugging DoublePulsar Shellcode


In this article i’d like to share a windbg script that will let us to load a shellcode from a file to kernel memory and create a kernel thread to execute it. I have not played a lot with the script yet, if you find some bug please tell me.