Series.

Multi-part series

Windows Drivers

8 parts

Part 1

Introduction to the Windows driver exploitation series — who it's for, what tools you'll need, and why drivers are a great target.

Part 2

A history of Windows drivers and an explanation of what they are, the different types, and how they fit into the modern Windows kernel.

Part 3

Setting up a driver development environment in Visual Studio and writing a minimal kernel driver that loads and unloads.

Part 4

How IRPs, IO Stack Locations, and dispatch functions work together to let user-mode applications communicate with kernel drivers.

Part 5

Building a driver that handles DeviceIoControl requests and exploring buffered, direct, and neither I/O methods.

Part 6

Setting up a kernel debugger, loading a driver into IDA, rebasing the text segment, and tracing IRPs through a live driver.

Part 7

Developing a kernel stack buffer overflow exploit against HackSysExtremeVulnerableDriver on 32-bit Windows 7 with token-stealing shellcode.

Part 8

Porting the HEVD buffer overflow exploit to 64-bit Windows 8.1 and using ROP to bypass Supervisor Mode Execution Prevention.