Windows Internals
-
Ferrox: Dissecting a Modern Rust-Based Infostealer
A deep technical analysis of Ferrox, a Rust Windows stealer with Hell's Gate syscalls, polymorphic builds and a Chrome App-Bound bypass.
-
Building the First Open-Source DMA HWID Spoofer
How I reversed Windows 11 kernel drivers in IDA Pro to build a DMA hardware ID spoofer in Rust, covering PatchGuard, DSE and SMBIOS.