Tutorials
Windows InternalsAPCs: Asynchronous Procedure Calls and Thread Hijacking SurfaceDeep-dive into Windows Asynchronous Procedure Calls - from KAPC kernel structures and KiDeliverApc dispatch to classic, early-bird, and special user APC injection…Read →Windows InternalsDPCs: Deferred Procedure Calls and Interrupt DeferralDeep dive into Windows Deferred Procedure Calls (DPCs): how the kernel defers ISR work to DISPATCH_LEVEL, the KDPC lifecycle, and how rootkits…Read →Windows InternalsIRQL Levels: Interrupt Request Priorities ExplainedDeep-dive into Windows Interrupt Request Levels (IRQL): how the HAL arbitrates hardware and software interrupts, which kernel operations are legal at each…Read →Windows InternalsSystem Calls and SSDT: How User Mode Reaches the KernelExplore how the SYSCALL instruction, MSR_LSTAR, and the System Service Descriptor Table (SSDT) bridge user mode and the Windows kernel - and…Read →Windows InternalsHAL and Ntoskrnl: The Kernel Core ComponentsDive deep into hal.dll and ntoskrnl.exe - the two Ring 0 binaries at the foundation of Windows. Learn their architecture, boot handoff,…Read →Windows InternalsUser Mode vs Kernel Mode: Privilege Rings and the BoundaryExplore how Windows enforces the Ring 3 / Ring 0 boundary using CPU privilege levels, traces the full SYSCALL dispatch path through…Read →Windows InternalsHandle Tables & Object ManagerUnderstand the role and internals of the Windows Object Manager, the structure and purpose of handle tables, kernel object creation and management,…Read →Windows InternalsMemory Management InternalsUnderstand the internal architecture and functionality of Windows memory management, including virtual memory, physical memory mappings, distinctions between stack and heap allocations,…Read →Windows InternalsThreads and the TEB (Thread Environment Block)Understand the internal workings of threads on Windows, the lifecycle of a thread from creation to termination, the critical role of the…Read →Windows InternalsWindows Process Creation Internals & PEBDeeply understand how Windows creates new processes, detailing the internal workings of the CreateProcess API, kernel object management, memory mapping, and the…Read →Exploit Developmentx86 and x64 Assembly from ScratchTo gain a deep, foundational understanding of how x86 and x64 assembly work, from CPU registers and calling conventions to memory addressing…Read →Exploit DevelopmentWhat is Exploit Development?To build a comprehensive understanding of what exploit development is, its goals, classifications, and how attackers leverage vulnerabilities to hijack program execution.…Read →