Back to browse
GitHub Repository

Walk x86-64 page tables by hand in qemu and gdb. Decompose a virtual address, follow cr3 through all levels of physical memory, and extract a flag from raw bytes.

27 starsPython

Hands-on x86-64 page table walk:finding a flag in physical RAM with GDB

by jazho76·Apr 21, 2026·4 points·0 comments

AI Analysis

●●SolidWizardryNiche GemRabbit Hole

Actually walk page tables in GDB instead of just reading diagrams.

Strengths
  • Hands-on approach beats lecture-only learning for understanding paging concepts.
  • Pre-built kernel and initramfs remove setup friction for the lab environment.
  • Busy loop keeps process context stable so CR3 stays correct during debugging.
Weaknesses
  • Narrow audience limited to systems learners and security researchers.
  • Linux/macOS only—no Windows QEMU support documented.
Category
Target Audience

Systems programmers, security researchers, OS students

Similar To

pwn.college · OSDev tutorials · Binary Ninja

Similar Projects