Ori Damari

I know it's a POC, but I thought it would be good to fix this anyway - 1) There is a stack buffer overflow reading the 'pid' from user mode....

https://github.com/repnz/ReversingMinesweeper/blob/9981360f1ee543ad487185ffddcc6a24f9aa09d2/Minesweeper/game.c#L361 Why are you chancing nearBombsCount?

Download and Index Symbols Of Executables

1

- It would be cool if you could search for anything and would look in symbols

Automatically resolve ordinals for the user (Ordinals of imports)

- Memory is high on disk and in RAM when loading

https://github.com/repnz/windows-inspector/blob/a6387eeeae215a2b85f669fe95b151207a29091c/WindowsInspector.Kernel/Ioctl.c#L49

https://github.com/repnz/windows-inspector/blob/a6387eeeae215a2b85f669fe95b151207a29091c/WindowsInspector.Kernel/Providers/ThreadProvider.c#L51

Implement "Stop" functionality

1

Event listening: - The listen() function is called when the user mode code asks. - The stop() function is called when the user mode process exits. - When the driver...