Register  |  FAQ  |  Search  |  Memberlist  |  Usergroups  |  Log in 
Reply to topic
 R00tkit Programming (Win32 DDK Device Drivers) 
Elite Entity

Joined: 02 Nov 2007
Posts: 77
Location: Birmingham Alabama
Reply with quote
With Sypha0x's helpful tips and encouragement, I have begun my journey into the world of r00tkit technology with the Windows DDK (Driver Development Kit). I am now working my way through Hoglund's book Rootkits: Subverting the Windows Kernel, and I am making ok progress. I know C/C++ enough for most simple tasks, but I bought C++ The Complete Reference (which I highly recommend) to get me up to speed on advanced things such as structure pointers and general pointers to arrays etc, etc. The problem I really have is the fact that the MSDN Library online is like the ocean Columbus must have pondered before embarking on his voyage to the Americas, HUGE AND UNKNOWN! There are SO MANY functions and usages that it is easy to get discouraged trying to figure out what is what. Thankfully, I have been using PEDump and PEView to crack open small executables and examining their imports, IAT entries etc. This is helping me understand how modules are imported and used for various procedures. All programs, even the small C++ programs I write have imported routines are translated to standard Windows API functions when used. This is helping me understand the process more. A function such as cout << "HELLO" << endl; is actually being translated into a standard format for the Windows API...Anyhow, I am learning alot everyday. Hopefully soon I will have some YouTube videos up soon and I will share them A.S.A.P. Until then I encourage everyone to at least tinker around with the Windows API and try to understand the format and purpose of the PE forumat and Windows functions. I just realized recently that OllyDBG will show you the names of every WinAPI function as is is called inside the stack window. Anyhow I will keep yall posted soon! Cool Cool
View user's profile Find all posts by aatk8626 Send private message
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
All times are GMT - 9 Hours  
Page 1 of 1  

  
  
 Reply to topic  
Powered by MakeForum.org - Free Forum Hosting
Sign Up now to get your Free Forum!