Petr Beneš's Avatar

Petr Beneš

@petrbenes.bsky.social

upper-mid-low-level

49 Followers  |  27 Following  |  5 Posts  |  Joined: 14.11.2024
Posts Following

Posts by Petr Beneš (@petrbenes.bsky.social)

Preview
GitHub - wbenny/scfw: A cross-platform C++ framework for building Windows shellcode A cross-platform C++ framework for building Windows shellcode - wbenny/scfw

Ever wanted to draw a triangle with OpenGL as a 2kb position-independent shellcode? No? Me neither.

But you can do it anyway: github.com/wbenny/scfw

08.02.2026 10:51 — 👍 0    🔁 0    💬 0    📌 0
Video thumbnail

I am stupid.

18.02.2025 00:59 — 👍 2    🔁 0    💬 0    📌 0
Post image

Can someone for the love of god tell me what's wrong with my WinDbg? All my symbols are loaded correctly. This callstack consists of ntoskrnl addresses, which, as I said, I _do_ have loaded symbols. "kb" command shows correct callstack. Just this sub-window isn't. What's wrong?!

17.02.2025 22:04 — 👍 0    🔁 0    💬 1    📌 0

vmi-rs 0.2 is out. It underwent a huge refactoring. OS components like Process, FileObject, Key, ... are now standalone objects.

Also, kernel crashdump support was added, so you can also use it as a kind of Volatility framework. But faster.

Example code:
github.com/vmi-rs/vmi/b...

04.02.2025 19:47 — 👍 2    🔁 1    💬 0    📌 0
MmScrubMemory | mindless-area The Nemesis of Virtual Machine Introspection

After 6 years, I made a blog thingy again.
This time about MmScrubMemory. An innocuous looking function that has bitten my ass several times in the last several years. And if you're developing a hypervisor, it might've bitten yours, too.

wbenny.github.io/2024-11-21-m...

22.11.2024 08:17 — 👍 1    🔁 0    💬 0    📌 0