PsIntialSystemProcess as a method to pslist
http://msdn2.microsoft.com/en-us/library/bb314008.aspx

Posted by Mr. Chapel
http://msdn2.microsoft.com/en-us/library/bb314008.aspx
Posted by Mr. Chapel
Things to do:
1. Fire up a vm, connect it to WinDBG and set the Nested Thread bit in cr0. Then, perform an iretd. I don't know what will happen. We'll see.
2. Find out vmware IDT, dump it, and then see it's trap handlers segment selector. Should be interesting.
3. Continue and read the VMM code.
4. Watch Largo.
5. Perheps switch to SongBird.
Posted by Mr. Chapel
Well, here is a something I wish I had today -
Allow users to have HTML embbedded within their emails.
Wait. I mean external HTML pages that will allow "Writely"-style editing of pages. That way I could tell people exactly what I want them to focus at when I send them a link.
Posted by Mr. Chapel
The are 2 ways for finding the .reloc section:
1. The appropiate IMAGE_DIRECTORY_ENTRY in DataDirectory
IMAGE_NT_HEADERS->IMAGE_OPTIONAL_HEADER->IMAGE_DATA_DIRECOTRY[section_index]
2. Going through the section table like any other section.
Posted by Mr. Chapel
So I've been pondering about writing a VM Debugger which will be able to debug all of the Guest OS's that runs on top of the host OS which manages them aided by Intel/AMD built-in processor support for Virtualization.
Probably do it using:
1. VMM Hooking on the VM Exit
2. Creating VM Exits on my own so I'll be able to interrupt and take VM snapshot at a user request.
This is just the beginning of this idea.
Posted by Mr. Chapel
Giving Tor a try, I found it rather slow, so I use it mainly when I send data (i.e when doing HTTP POST method) by Enabling it using Tor's Firefox plugin.
Free CSS Templates | Converted into Blogger Templates by Theme Craft | Falcon Hive