Part 3: WinDbg in Depth — Memory, Breakpoints, Stepping, and Advanced ToolsPart 2 got you attached with symbols loaded. This post is everything that follows: reading and writing memory, controlling execution with software and hardware breakpoints, stepping through assembly oAug 11 · 43 min readasad0x7.hashnode.dev
Part 1: x86 Architecture for Exploit Developers — Program Memory, the Stack, and CPU RegistersTL;DR — A 32-bit Windows process lives in 0x00000000–0x7FFFFFFF. The stack is a per-thread LIFO area (PUSH/POP) holding arguments, locals, and return addresses, bundled per call into a stack frame (prJun 16 · 7 min readasad0x7.hashnode.dev
Part 0: Building a Windows Exploit Development Lab with WinDbg (32-bitTL;DR — Build an isolated Windows 10 (1809-era) VM from a legal source (Microsoft Evaluation Center / official ISO). Snapshot it. In the isolated VM only, disable Windows Update and Microsoft DefenderJun 15 · 3 min readasad0x7.hashnode.dev