Basic Reversing of a Windows Kernel Driver: How WESP Talks to User Mode
Pavel Yosifovich
October 4, 2026
Pavel Yosifovich reverses the new WESP driver with the registry, WinObj, !drvobj and PE imports,
Pavel Yosifovich reverses the new WESP driver with the registry, WinObj, !drvobj and PE imports,
Learn how to programmatically create, load, and modify Windows .lnk shortcut files using the IShellLink
Launch Linux processes from a Windows application using the WslLaunch API. Pavel walks through the
Windows uses linked lists everywhere, but not in the usual “next/previous inside the object” style.
Windows Subsystem for Linux (WSL) first appeared in Windows 10 (Anniversary Update, 1607). It enables
Learn what kernel allocation tags are, how they help track Windows kernel memory, detect driver
We’ve all used the Recycle Bin. You delete a file, and it shows up there,
Starting with Windows Vista, Microsoft introduced protected processes—special executables the kernel shields from injection, memory
Unlock the power of RunDLL32! Learn how to execute DLL functions, invoke control panel dialogs,
Hi, and welcome to this video on writing a Windows service. In the previous video,