Got interrupted? Part 3. Page table traversal
How to give a middle finger to the memory manager
Staarblitz
Got interrupted? Part 2. Tales of two handle tables.
How to give a middle finger to the object manager
Using Buffer Security Checks to your advantage.
How I patched ACPI.sys's GsDriverEntry to redirect control flow to HxPosed driver.
KeUserModeCallback. Elegant way to wait for kernel.
How to utilize (hijack) ntdll to get elegant and nice callbacks from your kernel.
Got interrupted? Skill issue. How to deal with 0xFF IRQL on VMEXITs.
How to cope with inability to call any NT function in a VMEXIT.
How to make your own HyperCall ABI
How did I make my own HyperCall ABI in hxposed.