Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Reimplementing Local RPC in .Net

Hack In The Box Security Conference via YouTube

Start learning Write review
Boot.dev Ad

Learn Backend Development Part-Time, Online

Learn More → Corporate Finance Institute Ad

Finance Certifications Goldman Sachs and Amazon Teams Trust

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This presentation explains how to build a .NET client for local Windows RPC through ALPC reverse engineering, NDR parsing and serialization, interface discovery, structure marshalling, fuzzing, and PowerShell integration.

Syllabus

Intro
Architectural Overview
Interface Definition Language (IDL.)
MIDL Compiler
Auto-generated Server Definition Information
Example NDR Format String
Structure Marshalling
Client Implementation (32 bit)
Managed Implementation
Finding RPC Server Interfaces
iterative Approach
Undocumented Byte Codes
Going to the Standards
Arrays of Structures with Pointers
A Simple Alex Ionescu Trick
Finding the ALPC Port
Mapping Types
Simple Example
Dealing with Out Parameters in PowerShell
Find New Windows RPC Apis
Fuzzing
Possible Future Work

Taught by

Hack In The Box Security Conference

Reviews

Start your review of Reimplementing Local RPC in .Net

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.