{"product_id":"windows-kernel-exploitation-handbook","title":"Windows Kernel Exploitation Handbook","description":"\u003cp class=\"\"\u003eThis handbook is a practical introduction to Windows kernel internals, reverse engineering, and modern Windows kernel exploitation concepts.\u003c\/p\u003e\n\u003cp\u003eIt has been written by \u003ca href=\"https:\/\/www.linkedin.com\/in\/juansacco\/\" rel=\"noopener\" target=\"_blank\"\u003eJuan Sacco\u003c\/a\u003e, author of the Windows Kernel Exploitation training and expert in Kernel Internals, for security researchers, exploit developers, reverse engineers, and students who want a structured reference while learning Windows kernel exploitation.\u003c\/p\u003e\n\u003cp\u003eUnlike our video trainings, this handbook focuses on explaining the concepts, terminology, and architecture behind modern Windows kernel exploitation. It can be used as a companion while studying, building a lab environment, or following the Exploit Pack training material.\u003c\/p\u003e\n\u003cp\u003e\u003cstrong\u003eThroughout the handbook, you will explore topics such as:\u003c\/strong\u003e\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003eWindows kernel architecture\u003c\/li\u003e\n\u003cli\u003ePE format and Windows internals\u003c\/li\u003e\n\u003cli\u003eKernel drivers and driver objects\u003c\/li\u003e\n\u003cli\u003eDevice Objects, IRPs and IOCTLs\u003c\/li\u003e\n\u003cli\u003ePhysical and virtual memory\u003c\/li\u003e\n\u003cli\u003eAddress translation\u003c\/li\u003e\n\u003cli\u003eWinDbg basics\u003c\/li\u003e\n\u003cli\u003eDriver reversing with Ghidra\u003c\/li\u003e\n\u003cli\u003eModern Windows exploit mitigations\u003c\/li\u003e\n\u003cli\u003eSMEP, SMAP, kASLR, PatchGuard, VBS, HVCI, kCFG and kCET\u003c\/li\u003e\n\u003cli\u003eKernel exploitation fundamentals\u003c\/li\u003e\n\u003cli\u003eVulnerability classes commonly found in Windows drivers\u003c\/li\u003e\n\u003c\/ul\u003e\n\u003cp\u003eThe handbook includes diagrams, explanations, practical examples, and references intended to make complex kernel concepts easier to understand.\u003c\/p\u003e\n\u003cp\u003eThis is a written reference designed to complement practical training. It does not include the complete laboratory exercises, downloadable tools, debugging sessions, or hands-on exploit development projects available in our Windows Kernel Exploitation trainings.\u003c\/p\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cstrong\u003eFormat:\u003c\/strong\u003e\u003cspan\u003e Digital PDF handbook including high-resolution diagrams and illustrations\u003c\/span\u003e\n\u003c\/li\u003e\n\u003c\/ul\u003e","brand":"Exploit Pack","offers":[{"title":"Windows Kernel Exploitation Handbook","offer_id":54473733046605,"sku":null,"price":99.0,"currency_code":"EUR","in_stock":true},{"title":"Add Windows Kernel Vulnerability Hunting Training","offer_id":54473698443597,"sku":null,"price":650.0,"currency_code":"EUR","in_stock":true},{"title":"Add Windows Kernel Exploitation Training","offer_id":54473698476365,"sku":null,"price":650.0,"currency_code":"EUR","in_stock":true},{"title":"Add Advanced Windows Kernel Exploitation Training","offer_id":54473698509133,"sku":null,"price":650.0,"currency_code":"EUR","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0918\/4162\/6445\/files\/TrainingVulnerability.jpg?v=1777829466","url":"https:\/\/www.exploitpack.com\/products\/windows-kernel-exploitation-handbook","provider":"Exploit Pack","version":"1.0","type":"link"}