News
![Data Only attack via Physical R/W and [CR3 Walker PA to VA translation]](http://www.exploitpack.com/cdn/shop/articles/image-20210831220831378_deb324ff-e468-4b2b-8850-f7f929d6e3f2.png?v=1773233753&width=533)
Data Only attack via Physical R/W and [CR3 Walk...
Check out our Technical Training Courses on Windows Kernel Exploitation --- What is VBS/HVCI?VBS (Virtualization-based Security) and HVCI (Hypervisor-Protected Code Integrity) are Windows security features that use the CPU's virtualization to...
Data Only attack via Physical R/W and [CR3 Walk...
Check out our Technical Training Courses on Windows Kernel Exploitation --- What is VBS/HVCI?VBS (Virtualization-based Security) and HVCI (Hypervisor-Protected Code Integrity) are Windows security features that use the CPU's virtualization to...
NTOSKrnlWalker - Interactive Kernel ROP walker
Check out our Technical Training Courses on Windows Kernel Exploitation --- An interactive C++ console tool that uses dbghelp and pulls the PDB symbols from Microsoft for ntoskrnl.exe. Resolve kernel offsets,...
NTOSKrnlWalker - Interactive Kernel ROP walker
Check out our Technical Training Courses on Windows Kernel Exploitation --- An interactive C++ console tool that uses dbghelp and pulls the PDB symbols from Microsoft for ntoskrnl.exe. Resolve kernel offsets,...
WDK 10.0.26100.0 GDT for Ghidra 12
Check out our Technical Training Courses on Windows Kernel Exploitation --- WDK 10.0.26100.0 GDT for Ghidra 12 using clang preprocessing and sanitization so Ghidra’s parser accepts all kernel/CRT prototypes. Coming from...
WDK 10.0.26100.0 GDT for Ghidra 12
Check out our Technical Training Courses on Windows Kernel Exploitation --- WDK 10.0.26100.0 GDT for Ghidra 12 using clang preprocessing and sanitization so Ghidra’s parser accepts all kernel/CRT prototypes. Coming from...
Exploit Pack at No Hat conference (Italy)
Juan Sacco from Exploit Pack delivered a focused, hands-on workshop titled “Subverting the Windows Kernel with rootkits and exploits” at No Hat in Italy. The workshop focused on three primary exploit...
Exploit Pack at No Hat conference (Italy)
Juan Sacco from Exploit Pack delivered a focused, hands-on workshop titled “Subverting the Windows Kernel with rootkits and exploits” at No Hat in Italy. The workshop focused on three primary exploit...
Unsigned drivers loading on Windows 11 25H2 (fu...
Check out our Technical Training Courses on Windows Kernel Exploitation --- After having developed working exploits for physical r/w (ZwMapViewOfSection) and r/w through MSR (L_STAR) for Windows 11 25H2, I decided...
Unsigned drivers loading on Windows 11 25H2 (fu...
Check out our Technical Training Courses on Windows Kernel Exploitation --- After having developed working exploits for physical r/w (ZwMapViewOfSection) and r/w through MSR (L_STAR) for Windows 11 25H2, I decided...
Juan Sacco, founder of Exploit Pack at No Hat c...
Juan Sacco from Exploit Pack delivered a focused, hands-on workshop titled “Subverting the Windows Kernel with rootkits and exploits” at No Hat in Italy. The workshop was strictly technical: practical tools...
Juan Sacco, founder of Exploit Pack at No Hat c...
Juan Sacco from Exploit Pack delivered a focused, hands-on workshop titled “Subverting the Windows Kernel with rootkits and exploits” at No Hat in Italy. The workshop was strictly technical: practical tools...