red_dev.md

Red Development Cheatsheet

Dev Box Setup

Win11 VM from MSFT

• Optional debloat
• Note - disable 3d acceleration, otherwise a lot of applications like WinDBG will have their GUIs messed up

Tools to install:

• git
  • Alternatively,

  winget install --id Git.Git -e --source winget

  • Generate SSH key: ssh-keygen -t ed25519 -C "[email protected]"
• Kate text editor
• Windbg
• x64dbg
• NASM: winget install nasm -i
  • Add to path: C:\Program Files\NASM, verify with nasm --version
• msys2: winget install MSYS2.MSYS2
• mingw:
  • From msys2: pacman -S --needed base-devel mingw-w64-ucrt-x86_64-toolchain
  • Add to path: C:\msys64\ucrt64\bin
  • Verify with:

  gcc --version
  g++ --version
  gdb --version

• Rust

PE Format

IAT

dumpbin /imports path\to\executable

Resources

• A dive into the PE file format
• PE Internals Part 1: A few words about Export Address Table
• Exploring the Export Table

WinDBG

Install via PowerShell:

winget install Microsoft.WinDbg

GitHub Tricks

Push as a different user (using different SSH key):

$ GIT_SSH_COMMAND="ssh -i path/to/private/key" git push

Rust

Cross-compile Windows on Linux

rustup target add x86_64-pc-windows-gnu
cargo build --target x86_64-pc-windows-gnu

Windows Documentation

• Data type - typedefs and sizes