Skip to content

Instantly share code, notes, and snippets.

@hacksysteam

hacksysteam/token_stealing_5.raw

Created May 7, 2015 08:22
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save hacksysteam/4a14897da571f4b1ed90 to your computer and use it in GitHub Desktop.
Save hacksysteam/4a14897da571f4b1ed90 to your computer and use it in GitHub Desktop.
Download ZIP
Token Stealing Using WinDBG
Raw
token_stealing_5.raw
kd> dt nt!_KPCR 82770c00
+0x000 NtTib : _NT_TIB
+0x000 Used_ExceptionList : 0x88a573ac _EXCEPTION_REGISTRATION_RECORD
. . .
+0x0d8 Spare1 : 0 ''
+0x0dc KernelReserved2 : [17] 0
+0x120 PrcbData : _KPRCB
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment