2025-11-21 Driver Reverse Engineering 101 - Part II: Unpacking a VMProtected Kernel Driver DriversKernelReverse EngineeringUnpackingVMProtect Reverse Engineering Windows Drivers Unpacking VMProtect is rather straightforward and there are many ways in which it is documented for userland processes -
2025-08-15 Driver Reverse Engineering 101 - Part I: Static Analysis DriversReverse EngineeringWindows Reverse Engineering Windows Drivers A few months ago, while hunting for vulnerable drivers to abuse for BYOVD on operations, I stumbled upon a repository of
2024-03-11 Automating Deobfuscation of XorStringsNet .NETCILDeobfuscationReverse Engineering Reverse Engineering .NET Recently I wanted to learn a bit more about the .NET Common Intermediate Language (CIL). The CIL is basically the equiva