admin/winterknife-EVENSTAR
1
0
Fork 0
mirror of https://github.com/winterknife/EVENSTAR synced 2026-06-21 14:13:51 +00:00
Code Issues Packages Projects Releases Wiki Activity

added addendum to PagingDbgExt README

Browse Source
This commit is contained in:
winterknife
2025-05-19 15:23:23 -04:00
parent 767cbdf6e6
commit 170df9eda5
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
PagingDbgExt/README.md
+9
View File
@@ -126,6 +126,15 @@ Virtual address fffff7f00000c000 translates to physical address 13000.
Unloading PagingDbgExt extension DLL
```
## Notes
Since publishing this on Twitter, I have received some valid criticism from [sixtyvividtails](https://x.com/sixtyvividtails) (who btw you should follow if you are into low-level `Wintel` stuff).
You can read what they wrote [here](https://github.com/winterknife/EVENSTAR/issues/1).
Ultimately, this is a rehash of the technique that was first discovered by [Alex Ionescu](https://x.com/aionescu) and originally implemented by [Ulf Frisk](https://x.com/ulffrisk).
I don't plan on improving the heuristics at the moment but you reading this should make the changes (or at least know what might fail and what could be improved).
## Tested OS Versions
- `Windows 11 21H2 Build 22000 Revision 675 64-bit`