yardenshafir

PoC demonstrating the use of cve-2020-1034 for privilege escalation

yardenshafir

An application to view and filter pool allocations from a dmp file on Windows 10 RS5+.

yardenshafir

Useful scripts for WinDbg using the debugger data model

yardenshafir

Dumps information about all the callback objects found in a dump file and the functions registered for them

yardenshafir

A collection of tools, source code, and papers researching Windows' implementation of CET.

yardenshafir

Slides from various conference talks

yardenshafir

Driver demonstrating how to register a DPC to asynchronously wait on an object

yardenshafir

Documenting system information classes and their uses

yardenshafir

Post exploitation technique to turn arbitrary kernel write / increment into full read/write primitive on Windows 11 22H2

yardenshafir

A repository for I/O ring demos, use cases and performance testing on Windows

yardenshafir