Reverse Engineering Simple Windows Driver

Поділитися
Вставка
  • Опубліковано 16 бер 2024
  • In this video I will demonstrate how you can reverse engineer a simple "Hello, World" driver on Windows 10.
    Dependencies:
    - Cutter: winget install Rizin.Cutter
    - Windows Debugger (windbg): winget install Microsoft.WinDbg
    Docs:
    - DbgPrint: learn.microsoft.com/en-us/win...
    - COM Port Kernel Debugging: learn.microsoft.com/en-us/win...
  • Наука та технологія

КОМЕНТАРІ • 27

  • @michaeletzkorn
    @michaeletzkorn 2 місяці тому +10

    I didn't vote for this video, but I'm glad it won! As someone who develops hardware that needs to interact with Windows drivers, the kernel debugger seems very useful for figuring out what the driver's "quirks" (bugs) are to workaround them.

  • @KimTiger777
    @KimTiger777 2 місяці тому +2

    Just tested Cutter with simple win32 program although I don't understand much of the disassembly it generated. Thank you for the amazing video. Keep it up 👍👍

  • @p-ql7by
    @p-ql7by 2 місяці тому +4

    Never fail to excite us! Keep up the good work!

  • @mono9613
    @mono9613 2 місяці тому +1

    I'm really learning a crazy lot from your videos. Always looking forward to any new content!

  • @justinnamilee
    @justinnamilee 2 місяці тому +1

    I know I put 'neat' on most of your videos, and here it comes again: Neat. x)

  • @john_says_hi
    @john_says_hi 7 днів тому

    love your channel

  • @nonoroberto8219
    @nonoroberto8219 2 місяці тому

    So cool, please keep doing that stuff

  • @isaacsong-so5um
    @isaacsong-so5um 2 місяці тому +2

    amazing video👍

  • @legigatrain216
    @legigatrain216 2 місяці тому +2

    Thank you!

  • @user-lg2hl7hr3j
    @user-lg2hl7hr3j 2 місяці тому

    Sir, The uttmost respect to your work you have made malware reverse engg onboarding very easy with this video this is how MicroSoft must make their docs not some tedious legthy cryptic docs.
    In the next Video please try to run windows on raspberry pi so that we can learn the same way to reverse windows arm64 drivers

  • @BesmirZanaj
    @BesmirZanaj 2 місяці тому

    This was very cool.

  • @alexandrohdez3982
    @alexandrohdez3982 2 місяці тому

    Great video again 👏👏👏💪💪💪💪

  • @madghostek3026
    @madghostek3026 2 місяці тому

    Interesting video!

  • @homework8969
    @homework8969 2 місяці тому

    It would be cool if you could do this with some off the shelf drivers, although Im pretty sure that youtube wouldn’t like that.

  • @jannatgaoshiqqalb3598
    @jannatgaoshiqqalb3598 2 місяці тому

    Bro, how to read the contents of a dll file, and change it in a windows machine?
    And thank you for your prominent efforts to improve your channel to give us valueable knowledge about low level stuff

    • @nirlichtman
      @nirlichtman  2 місяці тому

      You can use cutter for that :)

  • @alargeboat
    @alargeboat 2 місяці тому

    hey Nir, as a possible video idea, could you maybe make a video on making a simple TUI app using ncurses/curses in C?

    • @nirlichtman
      @nirlichtman  2 місяці тому

      I have a video on making snake with curses, but its a good idea, ill consider also making a vid dedicated to making a simple tui visual editor or something like that using curses

    • @alargeboat
      @alargeboat 2 місяці тому

      @@nirlichtmanawesome, thank you!

  • @shad578
    @shad578 2 місяці тому

    Can you create a video for installing the visual studio build tools on Ubuntu 22.04 pls?

  • @isyankarmakarna9865
    @isyankarmakarna9865 2 місяці тому

    Please help me, how to simulate keyboard with kernel mode driver. Thank you.

    • @nirlichtman
      @nirlichtman  2 місяці тому

      You want to send keystrokes? Why not do that from user mode using for example SendInput? learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-sendinput

    • @isyankarmakarna9865
      @isyankarmakarna9865 2 місяці тому

      @@nirlichtman because the game cancel the user mode keysend. please help about this rhank you.

    • @nirlichtman
      @nirlichtman  2 місяці тому

      @@isyankarmakarna9865sorry can't help since I don't know how to do this in the kernel, good luck!

    • @isyankarmakarna9865
      @isyankarmakarna9865 2 місяці тому

      @@nirlichtman u r writing kernel driver u don t know how to do it?