This is my old note related to VS 2005, so it might work out of the box in newer versions of Visual Studio. I haven’t checked, but I still believe this information could be helpful to someone, so it’s a pleasure to share it. The first time I encountered this error in my error handling mechanism (Nbug), I… Read More »
C++ has acquired capabilities related to inheritance throughout its rich history that are not available in high-level languages like C# or Java (although simplified design avoids issues like the diamond problem; however, the diamond problem can still occur with interfaces in Java. But our topic today is testing, not language design). These capabilities include multiple inheritance, public/protected/private inheritance… Read More »
Some time ago, I was involved in refactoring old C++ code written in a PoC (Proof of Concept) format that was not optimized for testing. C++ has always been interesting compared to Java and C# due to: Everything works well with unit tests when you follow SOLID, TDD, DI, etc. Of course, if your legacy code doesn’t contain… Read More »
I’ve never written C/C++ code for macOS before, despite using macOS as my primary notebook for daily tasks. It was fascinating to explore how configuration options for header files and libraries work in this environment. As you may recall, in Visual Studio on Windows, you can use various tools to build projects, including the very powerful vcpkg. On… Read More »
I recently encountered an interesting issue that I thought might be worth sharing, as it relates to the common practice of limiting incoming requests based on certain parameters like restricting the size of headers. This kind of restriction is typically implemented by web servers (e.g., Apache, Nginx, etc.) to prevent various attacks, such as buffer overflows or denial… Read More »
When you create your application using C/C++, there are several options for working with external dependencies, such as libraries like: and so on. Some of the libraries, along with header files, are available for installation using a Linux package manager thus we typically do the following: In Linux package managers, development-related libraries often have -dev or -devel as… Read More »
I found my old note about signature detection apporach that typically used by AV products and I thought that it may be interested, so let’s dive in. As an example, let’s consider Mimikatz (one of the most popular hacking tools) – Mimikatz 2.2.0 branch, tagged as version 2.2.0. Interestingly, the simplest part of this tool is the kernel-mode… Read More »
To gather information about processes running with administrator privileges on endpoints, it’s important to understand Windows Integrity Levels, introduced by Microsoft in Windows Vista (see Mandatory Integrity Control). Mandatory Integrity Control (MIC) is a security feature that enforces access control by assigning integrity levels to processes and objects. It uses integrity levels: Low, Medium, High, and System to… Read More »
You can often find structure in the code that looks like this TOKEN_PRIVILEGES structure. The ANYSIZE_ARRAY macro is used in the definition of the TOKEN_PRIVILEGES structure to allow for a flexible array member. This is a common technique in C and C++ to define structures that can have a variable-length array as their last member. In C and… Read More »
Once, I returned to an old project in C/C++. I saw several interesting ideas in it and wanted to revive it and rewrite part of the code to align with best practices (since previously it resembled more of a Proof of Concept). When I started working on it, for someone who hadn’t used C/C++ for a while, it… Read More »