Under the Hood of AFD.sys Part 1: Investigating Undocumented Interfaces

leftarcode.com

cross-posted to:
blueteamsec

Under the Hood of AFD.sys Part 1: Investigating Undocumented Interfaces

leftarcode.com

RSS Bot@lemmy.bestiver.seMB to Hacker News@lemmy.bestiver.seEnglish · 8 个月前

cross-posted to:
blueteamsec

A quick look at how I used WinDbg and NtCreateFile to craft a raw TCP socket via AFD.sys on Windows 11, completely skipping Winsock.

Comments

You must log in or # to comment.

Chat

Hacker News@lemmy.bestiver.se

hackernews@lemmy.bestiver.se

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !hackernews@lemmy.bestiver.se

Community locked: only moderators can create posts. You can still comment on posts.

Posts from the RSS Feed of HackerNews.

The feed sometimes contains ads and posts that have been removed by the mod team at HN.

Source of the RSS Bot

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

393 users / day
1.66K users / week
3.5K users / month
8.65K users / 6 months
41 local subscribers
4.58K subscribers
44K Posts
20.8K Comments
Modlog