Speculating the entire x86-64 Instruction Set In Seconds with This One Weird Trick
As cheesy as the title sounds, I promise it cannot beat the cheesiness of…
x86 Internals
Fun in x86-64 Ring 0.
Arbitrary Code Execution at Ring 0 using CVE-2018-8897
Just a few days ago, a new vulnerability allowing an unprivileged user to run #DB handler…
Making the Perfect Injector: Abusing Windows Address Sanitization and CoW
By the end of this post, I aim to make an injector unlike any other: one…
Splitting Data from Code, Forgotten x86 Feature: Segmentation
With the introduction of sTLB with Intel Nehalem, TLB splitting — once a reliable technique — became…
No more articles