Just been looking up on some articles on rootkits and came across this 6 month old article.
If you know nothing about shellcode and its uses, even if you do, this article is well structured and contains still relevant information. Unless SP2 really played with the kernel, then im sure these fundamentals will still hold strong.
Hopefully my next reply will be with some decent, my own, shellcode :P
http://hxdef.czweb.org/knowhow/advances.txt
