Reverse Engineering Simple Windows Driver

  Рет қаралды 7,166

Nir Lichtman

Nir Lichtman

3 ай бұрын

In this video I will demonstrate how you can reverse engineer a simple "Hello, World" driver on Windows 10.
Dependencies:
- Cutter: winget install Rizin.Cutter
- Windows Debugger (windbg): winget install Microsoft.WinDbg
Docs:
- DbgPrint: learn.microsoft.com/en-us/win...
- COM Port Kernel Debugging: learn.microsoft.com/en-us/win...

Пікірлер: 27
@michaeletzkorn
@michaeletzkorn 3 ай бұрын
I didn't vote for this video, but I'm glad it won! As someone who develops hardware that needs to interact with Windows drivers, the kernel debugger seems very useful for figuring out what the driver's "quirks" (bugs) are to workaround them.
@KimTiger777
@KimTiger777 3 ай бұрын
Just tested Cutter with simple win32 program although I don't understand much of the disassembly it generated. Thank you for the amazing video. Keep it up 👍👍
@p-ql7by
@p-ql7by 3 ай бұрын
Never fail to excite us! Keep up the good work!
@mono9613
@mono9613 3 ай бұрын
I'm really learning a crazy lot from your videos. Always looking forward to any new content!
@justinnamilee
@justinnamilee 3 ай бұрын
I know I put 'neat' on most of your videos, and here it comes again: Neat. x)
@nonoroberto8219
@nonoroberto8219 3 ай бұрын
So cool, please keep doing that stuff
@john_says_hi
@john_says_hi 23 күн бұрын
love your channel
@isaacsong-so5um
@isaacsong-so5um 3 ай бұрын
amazing video👍
@legigatrain216
@legigatrain216 3 ай бұрын
Thank you!
@BesmirZanaj
@BesmirZanaj 3 ай бұрын
This was very cool.
@alexandrohdez3982
@alexandrohdez3982 3 ай бұрын
Great video again 👏👏👏💪💪💪💪
@madghostek3026
@madghostek3026 3 ай бұрын
Interesting video!
@user-lg2hl7hr3j
@user-lg2hl7hr3j 3 ай бұрын
Sir, The uttmost respect to your work you have made malware reverse engg onboarding very easy with this video this is how MicroSoft must make their docs not some tedious legthy cryptic docs. In the next Video please try to run windows on raspberry pi so that we can learn the same way to reverse windows arm64 drivers
@homework8969
@homework8969 3 ай бұрын
It would be cool if you could do this with some off the shelf drivers, although Im pretty sure that youtube wouldn’t like that.
@jannatgaoshiqqalb3598
@jannatgaoshiqqalb3598 3 ай бұрын
Bro, how to read the contents of a dll file, and change it in a windows machine? And thank you for your prominent efforts to improve your channel to give us valueable knowledge about low level stuff
@nirlichtman
@nirlichtman 3 ай бұрын
You can use cutter for that :)
@shad578
@shad578 3 ай бұрын
Can you create a video for installing the visual studio build tools on Ubuntu 22.04 pls?
@alargeboat
@alargeboat 3 ай бұрын
hey Nir, as a possible video idea, could you maybe make a video on making a simple TUI app using ncurses/curses in C?
@nirlichtman
@nirlichtman 3 ай бұрын
I have a video on making snake with curses, but its a good idea, ill consider also making a vid dedicated to making a simple tui visual editor or something like that using curses
@alargeboat
@alargeboat 3 ай бұрын
@@nirlichtmanawesome, thank you!
@isyankarmakarna9865
@isyankarmakarna9865 3 ай бұрын
Please help me, how to simulate keyboard with kernel mode driver. Thank you.
@nirlichtman
@nirlichtman 3 ай бұрын
You want to send keystrokes? Why not do that from user mode using for example SendInput? learn.microsoft.com/en-us/windows/win32/api/winuser/nf-winuser-sendinput
@isyankarmakarna9865
@isyankarmakarna9865 3 ай бұрын
@@nirlichtman because the game cancel the user mode keysend. please help about this rhank you.
@nirlichtman
@nirlichtman 3 ай бұрын
@@isyankarmakarna9865sorry can't help since I don't know how to do this in the kernel, good luck!
@isyankarmakarna9865
@isyankarmakarna9865 3 ай бұрын
@@nirlichtman u r writing kernel driver u don t know how to do it?
Windows Kernel Debugging Introduction
6:53
Nir Lichtman
Рет қаралды 6 М.
Making Snake Boot Sector Game in Assembly (x86)
19:52
Nir Lichtman
Рет қаралды 10 М.
Just try to use a cool gadget 😍
00:33
123 GO! SHORTS
Рет қаралды 85 МЛН
Children deceived dad #comedy
00:19
yuzvikii_family
Рет қаралды 5 МЛН
Каха ограбил банк
01:00
К-Media
Рет қаралды 10 МЛН
How to diagnose Blue Screen Windows 11, 10 💻
0:59
ASA Technical
Рет қаралды 568 М.
The Importance of Resource Cleanup in C
7:02
Nir Lichtman
Рет қаралды 6 М.
Get All System Information With One Command
0:57
Britec09
Рет қаралды 253 М.
Making Simple Windows DLL in C
2:51
Nir Lichtman
Рет қаралды 13 М.
Making Simple Graphical Linux Distro from Scratch
17:19
Nir Lichtman
Рет қаралды 52 М.
Everyone's Crazy for WinGet Don't Get Left Behind!
6:53
Azure Academy
Рет қаралды 18 М.
Making Minimalist Web Server in Assembly on Linux (x64)
18:31
Nir Lichtman
Рет қаралды 35 М.
Intel SR-IOV Explanation
9:59
Patrick Kutch
Рет қаралды 198 М.
APPLE совершила РЕВОЛЮЦИЮ!
0:39
ÉЖИ АКСЁНОВ
Рет қаралды 4,1 МЛН
Неразрушаемый смартфон
1:00
Status
Рет қаралды 1,8 МЛН
🔥Идеальный чехол для iPhone! 📱 #apple #iphone
0:36
Не шарю!
Рет қаралды 1,3 МЛН
Купил этот ваш VR.
37:21
Ремонтяш
Рет қаралды 300 М.