Skip to main content

You are not logged in. Your edit will be placed in a queue until it is peer reviewed.

We welcome edits that make the post easier to understand and more valuable for readers. Because community members review edits, please try to make the post substantially better than how you found it, for example, by fixing grammar or adding additional resources and hyperlinks.

4
  • 1
    You might hit the wall on newer Windows versions, though. The answer of the OP is more versatile in that sense, but yours is certainly more professional :) ... also don't forget devcon for the driver loading needs (comes with source in the DDKs/WDKs) Commented Apr 2, 2013 at 14:41
  • 1
    @0xC0000022L I haven't had a problem with this on newer versions of Windows; just do the normal stuff like enable test signing, etc. Admittedly, I haven't tried it on Windows 8, though. Did something change? Commented Apr 6, 2013 at 9:10
  • @mrduclaw how do i Change the first byte of the driver's entry point to be an INT3?!?? Commented Jan 1, 2016 at 21:39
  • 1
    @AminM Sorry for the late response, I haven't checked this account in a long time. Open the file in IDA, find the bytes of where the entry-point is. Open it in a hex editor and chnage it to a 0xCC (break-point). Or, you can probably edit it directly in IDA these days. Good luck! Commented Jan 23, 2017 at 5:51