Skip to content

Instantly share code, notes, and snippets.

@hacksysteam

hacksysteam/token_stealing_7.raw

Created May 7, 2015 08:25
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hacksysteam/4972d49588e3373a9627 to your computer and use it in GitHub Desktop.
Save hacksysteam/4972d49588e3373a9627 to your computer and use it in GitHub Desktop.
Download ZIP
Token Stealing Using WinDBG
Raw
token_stealing_7.raw
kd> dt nt!_KTHREAD 0x83dcd020
+0x000 Header : _DISPATCHER_HEADER
. . .
+0x03c SystemThread : 0y1
+0x03c Reserved : 0y000000000000000000 (0)
+0x03c MiscFlags : 0n8193
+0x040 ApcState : _KAPC_STATE
+0x040 ApcStateFill : [23] "`???"
+0x057 Priority : 12 ''
. . .
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment