The following is the full listing of available blog posts. The latest articles will appear on top:

• 
  Depths of Windows APC

  Aspects of internals of the Asynchronous Procedure Calls from the kernel mode.

  windows-internals

  apc

  windows-kernel

  win32

  cfg

  undocumented

  asm

  November 27, 2020

  by Rbmm

  by Dennis A. Babkin
• 
  Windows Security Legacy

  DLL Hijacking - Why running executables from a user-writable location is a bad idea.

  windows-internals

  pe

  win10

  vulnerability

  bug

  anti-malware

  cig

  mitigation-policy

  November 13, 2020

  by Dennis A. Babkin
• 
  Intricacies of Windows APC

  Deep dive into user-mode Asynchronous Procedure Calls in Windows.

  windows-internals

  win32

  apc

  November 11, 2020

  by Dennis A. Babkin

  by Rbmm
• 
  Visits to Kenya

  Things to visit in Kenya for the Western travelers.

  kenya

  general-audience

  travel

  November 6, 2020

  by Dennis A. Babkin
• 
  Scams, State of Healthcare and Bureaucracy

  M.P. Shah Hospital scam & inaccurately dangerous test results.

  general-audience

  scam

  kenya

  travel

  November 1, 2020

  by Dennis A. Babkin
• 
  Deep Dive Into Windows PE Format - GetProcAddress Spoofing

  Malware researchers - Beware of GetProcAddress spoofing via manipulation of PE format in memory.

  windows-internals

  asm

  pe

  anti-malware

  msrc

  October 1, 2020

  by Dennis A. Babkin
• 
  Deep Dive Into Assembly Language - Windows Shellcode - GetProcAddress

  How to implement GetProcAddress in shellcode using x86-64 and x86 assembly language.

  windows-internals

  asm

  shellcode

  pe

  September 14, 2020

  by Dennis A. Babkin
• 
  Pwning Windows Updates - DLL Hijacking Through Orphaned DLL

  Exploiting bug in Windows Update Service to gain local privilege escalation through DLL hijacking.

  win10

  updates

  bug

  reverse-engineer

  windows-internals

  September 12, 2020

  by Dennis A. Babkin

  by Rbmm
• 
  Pwning Windows Kernel - Unkillable User-Mode Process - Part 2

  Technical details of the Windows 10 kernel bug - Cascade of deadlocks.

  windows-kernel

  windows-internals

  reverse-engineer

  synchronization

  bug

  September 10, 2020

  by Rbmm
• 
  Pwning Western Democracy - Stopping State Sponsored Trolls

  How social media companies can thwart state sponsored trolls, and why they won't do it.

  scam

  elections

  general-audience

  September 10, 2020

  by Dennis A. Babkin
• 
  Pwning Windows Kernel - Unkillable User-Mode Process

  Windows 10 kernel deadlock bug and our experience submitting it to Microsoft Security Response Center.

  windows-kernel

  reverse-engineer

  bug

  msrc

  September 9, 2020

  by Dennis A. Babkin

  by Rbmm
• 
  Windows Kernel Debugging - Running WinDbg Preview In An Older OS

  Installing WinDbg Preview in an operating system prior to Windows 10.

  windows-kernel

  windbg-preview

  debugger

  appx

  undocumented

  August 21, 2020

  by Dennis A. Babkin
• 
  Windows 10 Updates - Delay & Conquer

  How to indefinitely delay installation of updates on Windows 10 Pro.

  win10

  updates

  general-audience

  August 15, 2020

  by Dennis A. Babkin

  by Rbmm
• 
  Windows 10 N - Bloatware-B-Gon

  How to install the version of Windows 10 with reduced amount of bloatware.

  win10

  crapware

  general-audience

  August 13, 2020

  by Dennis A. Babkin
• 
  Windows Kernel Debugging - WinDbgX Setup

  Setting up new WinDbgX debugger for kernel debugging via fast network connection in WMware VM.

  windows-kernel

  debugger

  windbg-preview

  vm

  vmware

  reverse-engineer

  August 12, 2020

  by Dennis A. Babkin