Skip to content
Hallway
0:00 / 0:00

#windows#alexionescu#reverseengineering

OffensiveCon19 - Alex Ionescu - Keynote - Reversing Without Reversing

OffensiveCon

10K subscribers • 2 videos on Hallway

YouTube
  • Recommended by 2 people: 1 on Hacker News and 1 on Lobsters.
  • Presented by Alex Ionescu, Windows internals expert

Advanced. Deep dive for people who know the field.

19K views7 years ago2 recommendations

SecuritySystems programmingReverse engineeringOperating systems

Alex Ionescu explains how to reverse engineer Windows internals legally using public symbols, telemetry, and other system artifacts.

The uploader added no description.

Why it's here

2 people recommend this

What people say. Recommended as an insightful guide on how to reconstruct Windows kernel structures and APIs without traditional reverse engineering.

tiraniddoon Hacker News • Recommends

On “A Kernel Engineer at Microsoft's Answer to “What Do You Think about ReactOS?””

…ivate symbols MS do ship. For example a significant proportion of the COM runtime has private symbols, intentionally. You can extract from those a surprising amount of system call structure information. I'd recommend watching Alex Ionescu's talk at OffensiveCon about how he does reverse engineering on Windows to see many of these things in action. link to this video I'm not saying any of this would make it a clean-room re-implementation but to say ReactOS cannot possibly have been reverse engi…
View on Hacker News

calvinon Lobsters • Recommends

Reversing Without Reversing
2View on Lobsters

dingbyon Hacker News • Mentions

On “A Kernel Engineer at Microsoft's Answer to “What Do You Think about ReactOS?””

The more you write in these threads the more you sound like a fool. link to this video Start around the 9 minute mark.
View on Hacker News

jeditobeon Hacker News • Mentions

On “A Kernel Engineer at Microsoft's Answer to “What Do You Think about ReactOS?””

Well, now please re-read your statement Do you understand that internal data structures entirely from the NT kernel, including (why?) their names != verbatim code from NT in your source The program code is logic first of all. For the similarities of names and structures itself - the answer is in this already mentioned video link to this video from the 9:53 moment of time. TL:DW there are a lot of legal ways of obtaining names of variables, exported functions and structures
View on Hacker News

dvfjsdhgfvon Hacker News • Mentions

On “ReactOS (Free and Open Source Windows): Jérôme Gardou hired to work full-time”

> Last time ReactOS came up here some folks were concerned about legality too, and I think there even was a salty Microsoft employee ranting about stolen code from the source leaks. Link to the actual dicussion here with the comments of the MS employee: link ReactOS developer's explanation on how they work: link to this video
View on Hacker News

MikusRon Hacker News • Mentions

On “ReactOS Updates”

It was by one "I am very smart. Nobody can be as smart as me" Microsoft programmer. Who completely dismissed this explanation link to this video
View on Hacker News