BlahCats Blog

Tales of a binary encoded life...

Building a Debian Stretch QEMU image for AARCH64

Published by hugsy , on 7 January 2018 , under tutorial

Introduction After releasing my QEMU images and then publishing a post on how to build a QEMU image for Debian MIPSel, I still received many demands for information on building more VMs, and among tho…

Arbitrary Write primitive in Windows kernel (HEVD)

Published by hugsy , on 31 August 2017 , under tutorial, research

Back again to modern Windows kernel exploitation! After understanding how to build shellcodes for Windows 64-bit and applying this knowledge on a trivial kernel stack overflow vulnerability we are rea…

First exploit in Windows Kernel (HEVD)

Published by hugsy , on 18 August 2017 , under tutorial, research

Hi there ✋ This post is the third chapter of this series, where we dive into Windows kernel. The previous posts introduced respectively how to painlessly setup a Windows exploit lab, then how to creat…

A Primer to Windows x64 shellcoding

Published by hugsy , on 14 August 2017 , under tutorial

Continuing on the path to Windows kernel exploitation… Thanks to the previous post, we now have a working lab for easily (and in a reasonably fast manner) debug Windows kernel. Let’s skip ahead for a …

Setting up a Windows VM lab for kernel debugging

Published by hugsy , on 7 August 2017 , under tutorial

This is the first on a series of posts on Windows kernel debugging and exploitation. In this part, we’ll cover in details how to get everything setup using Linux as host, VirtualBox as hypervisor and …

Building a Debian Stretch QEMU image for MIPSel

Published by hugsy , on 14 July 2017 , under tutorial

Building a Debian Stretch (9) QEMU image running MIPSel TL;DR Two new images, Debian Stretch on MIPSel and MIPS64el were added to my QEMU image repo The rest of this post explains how I built them. …