Introduction Structured Exception Handlers (SEH) is a mechanism used by Windows C++ applications to catch exceptions that occur during the runtime of the program. Other high-level languages like P...

Introduction I’m largely unfamiliar with non-paged pools, but according to Microsoft docs, “The nonpaged pool consists of virtual memory addresses that are guaranteed to reside in physical memory ...

Preface I kinda skipped the over Stack Overflows with GS section since I quickly realized that doing it in x64 is near impossible (at least for me currently) with just a pure vanilla stack buffer ...

Introduction This blog post serves as a reference guide/lookup table for me and those interested in Windows Kernel Exploitation (WKE) or Windows kernel malware development such as rootkits. It wil...

Introduction While writing a heap pwn challenge for Sunshine CTF called “Secure Flag Terminal”, I wanted to make my challenge more difficult than a traditional House of Force exploit. So I wrote a...

Introduction This series will highlight my experience with the HackSys Extremely Vulnerable Driver (HEVD) as I delve into learning Windows kernel exploitaiton I intentionally left out the i...

Introduction Kernel debugging isn’t that much different than user-mode debugging from my experience, it just requires more setup and you can’t (or shouldn’t) do it locally. Here’s a high-level ove...