Our Research
Global Descriptor Table Hijacking in Windows 11
Interested in Windows Kernel? Check out our Technical Training Courses We have demonstrated how DOG, our Data Only Gadgets tooling inside EP3, can use existing kernel read/write primitives to redirect...
Global Descriptor Table Hijacking in Windows 11
Interested in Windows Kernel? Check out our Technical Training Courses We have demonstrated how DOG, our Data Only Gadgets tooling inside EP3, can use existing kernel read/write primitives to redirect...
Kernel Driver Gates and Handshakes
By Juan Sacco from Exploit Pack Looking to take your kernel skills further? Check out our Windows Kernel Exploitation Training Let's talk today about gates and handshakes, a common security...
Kernel Driver Gates and Handshakes
By Juan Sacco from Exploit Pack Looking to take your kernel skills further? Check out our Windows Kernel Exploitation Training Let's talk today about gates and handshakes, a common security...
IDT Table Hijacking under VBS/HVCI/kCET in Wind...
So far we have demostrated how DOG tool (Data Only Gadgets) capabilities from our EP3 platform can be used to hijack Kernel tables like SSDT and Shadow SSDT. Our next...
IDT Table Hijacking under VBS/HVCI/kCET in Wind...
So far we have demostrated how DOG tool (Data Only Gadgets) capabilities from our EP3 platform can be used to hijack Kernel tables like SSDT and Shadow SSDT. Our next...
EuskalHack 2026 Conference - Subverting the Win...
dern Windows systems are protected by an increasingly sophisticated set of security mechanisms designed to make kernel exploitation significantly more difficult than it was just a few years ago. At...
EuskalHack 2026 Conference - Subverting the Win...
dern Windows systems are protected by an increasingly sophisticated set of security mechanisms designed to make kernel exploitation significantly more difficult than it was just a few years ago. At...
WinNotify: Building Kernel Read/Write from CR3-...
In this post I’m going to document some notes from reversing the WinNotify signed driver and turning its IOCTL interface into a stable kernel read/write primitive. The driver has been...
WinNotify: Building Kernel Read/Write from CR3-...
In this post I’m going to document some notes from reversing the WinNotify signed driver and turning its IOCTL interface into a stable kernel read/write primitive. The driver has been...
Shadow SSDT Hijacking: Achieving Kernel Code Ex...
On this blog, I'll walk you through Shadow SSDT hijacking to achieve kernel code execution under VBS/HVCI/kCET-enabled environments in Windows 11 (latest build). We'll first cover the fundamentals of userland...
Shadow SSDT Hijacking: Achieving Kernel Code Ex...
On this blog, I'll walk you through Shadow SSDT hijacking to achieve kernel code execution under VBS/HVCI/kCET-enabled environments in Windows 11 (latest build). We'll first cover the fundamentals of userland...
Technical Training
-
Windows Kernel Exploitation
Regular price €600Regular price -
Vulnerability Hunting for the Windows Kernel
Regular price €600Regular price -
Windows Kernel Exploitation Advanced
Regular price €600Regular price
