Not necessarily nice, but certainly interesting

NTDEV
1

... and yes, especially for driver writers, that's why I want to share it.

http://www.bluepillproject.org/

Three minor changes necessary, but I am sure that any normal developer will be able to figure them out.

WDK needed, the WNET DDK doesn't like the Assembler files :wink:

// Oliver

PS: No, this is no contribution to the ASM in KM discussion :wink:

May the source be with you, stranger :wink:

ICQ: #281645
URL: http://assarbad.info | http://windirstat.info | http://blog.assarbad.info

2

Note that this is the NEW Blue Pill (not to be confused with last year’s Black Hat presentation)

If nothing else, folks should read JR’s PPT presentation to Black Hat 2007 (this week): 127 pages, and interesting from beginning to end.

Peter
OSR

3

Yep, sorry that I didn’t mention this. However, it is mentioned on the project’s website.

I think we can start talking about BluePill, because the original’s source is most likely the only thing that’s owned by COSEINC, while the name seems to be usable for Joanna Rutkowska and her partner.

// Oliver

-------- Original-Nachricht --------
Datum: Thu, 2 Aug 2007 18:16:46 -0400 (EDT)
Von: xxxxx@osr.com
An: “Windows System Software Devs Interest List”
Betreff: RE:[ntdev] Not necessarily nice, but certainly interesting

> Note that this is the NEW Blue Pill (not to be confused with last year’s
> Black Hat presentation)
>
> If nothing else, folks should read JR’s PPT presentation to Black Hat 2007
> (this week): 127 pages, and interesting from beginning to end.
>
> Peter
> OSR
>
>
> —
> NTDEV is sponsored by OSR
>
> For our schedule of WDF, WDM, debugging and other seminars visit:
> http://www.osr.com/seminars
>
> To unsubscribe, visit the List Server section of OSR Online at
> http://www.osronline.com/page.cfm?name=ListServer

–
---------------------------------------------------
May the source be with you, stranger :wink:

ICQ: #281645
URL: http://assarbad.info | http://windirstat.info | http://blog.assarbad.info

4

> ----------

From: xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com] on behalf of xxxxx@osr.com[SMTP:xxxxx@osr.com]
Reply To: Windows System Software Devs Interest List
Sent: Friday, August 03, 2007 12:16 AM
To: Windows System Software Devs Interest List
Subject: RE:[ntdev] Not necessarily nice, but certainly interesting

If nothing else, folks should read JR’s PPT presentation to Black Hat 2007 (this week): 127 pages, and interesting from beginning to end.

Indeed very interesting. I’ll have to find somebody to do my work so I could play with such things :wink:

Best regards,

Michal Vodicka
UPEK, Inc.
[xxxxx@upek.com, http://www.upek.com]

5

LOL… MY problem, precisely. Soooo much interesting stuff, so little time.