Railgun — How to Use Structs in Railgun Calls

Railgun is a really powerful extension for the Metasploit Framework that allows anyone to do windows API calls from a meterpreter session. There is a really good primer on Rapid7’s site that goes over more about what Railgun is, and has some helpful links on the Windows API…

Loading a driver on the fly

In previous entries, the way we have loaded a device driver was to use OSR’s Driver Loader so that we could quickly install, uninstall, start, and stop the service. We did this because it was quicker than putting an entry in the registry (which requires a reboot to complete). So how to do you load…

How to deal with pointers and different memory allocations

I have recently gotten back into C++ and win32 programming. A recent interview question I came across was about reversing a string in memory and rewriting the strlen function.

More Driver Debugging

Attaching WinDbg to a VM to be able to get debugging output and create breakpoints is good, but if you don’t know how to use it, then its not terribly useful. However, in the cases we are working with (where we are developing and testing the code), we would have a lot more insight into what the driver…

How to setup your environment with two Virtual Machines

Apparently my comment system does not work. But here is Annette’s solution to setting up the debugger and target machine as virtual machines.

Here is how I used OSX with two VMs instead of using Bootcamp or a Windows box:

First!

Reminders to future me about how to do things.

I may not be of any particular interest, in that there is a fair chance that this will be a blog that no one will read. However, I am getting to the point in my career where I want to open opportunities outside of my day job. On those lines, I…