Driver Buddy Reloaded is an IDA Pro Python plugin that helps automate some tedious Windows Kernel Drivers reverse engineering tasks
GNU General Public License v3.0
313
stars
46
forks
source link
[BUG] "IOCTL Decode All" pick-up NTSTATUS values #3
Closed
VoidSec closed 2 years ago
In
https://github.com/VoidSec/DriverBuddyReloaded/blob/d272537d6cc9ff7c16eccb5aa04d101401bc203e/DriverBuddyReloaded.py#L185
https://github.com/VoidSec/DriverBuddyReloaded/blob/d272537d6cc9ff7c16eccb5aa04d101401bc203e/DriverBuddyReloaded.py#L230
decoding suspected IOCTL codes sometimes "pick-up" NTSTATUS values.![image](https://user-images.githubusercontent.com/5717603/138675368-9383f661-a004-41e9-9475-48e68b34b8f2.png)