gengstah

gengstah

Exploring the spaces between specs — where weird machines live and exploits are born

Exploiting Reversing (ER) seriesArticle 0 6

Source provenance. Raw material catalogued for the wiki ingest pipeline. Lives offline at raw_sources/windows-exploit-research/exploit_reversing_06.md.

Status: catalogued

Excerpt

- KB5037853) in the IDA Pro, decompiled both files and performed binary diffing using BinDiff typedef struct REPARSE_DATA_BUFFER { ULONG ReparseTag; USHORT ReparseDataLength; USHORT Reserved; struct { UCHAR DataBuffer[1]; } GenericReparseBuffer; } REPARSE_DATA_BUFFER, *PREPARSE_DATA_BUFFER; __int64 HsmDriverEntry( PDRIVER_OBJECT DriverObject, __int64 RegistryPath, struct_struct_arg_3 *struct…

Likely wiki targets

Pending — this source has not yet been distilled into wiki pages. Future ingest can populate links to the concept / technique / CVE pages this material would inform.