On Tuesday, July 14, Microsoft released the largest Patch Tuesday update in its history, fixing more than 600 vulnerabilities. A bug I reported to Microsoft on May 17 was patched as CVE-2026-50458 ...

Introduction In this blog I am going to explain several objects and exploitation techniques that are pretty well known when exploiting the Windows kernel paged pool. For the bug itself I will use o...

Introduction In this post I will walk through the root cause analysis of a vulnerability in a Windows minifilter driver. Along the way, I will also cover the background needed to understand what m...

Introduction In the previous post, I started my path into Windows kernel exploitation. The next step I wanted to tackle was the dynamic allocator. This part has always interested me much more tha...

Introduction This post is part of an idea I have been wanting to explore for a while: building the kind of HEVD material I wish I had when I started with Windows kernel exploitation. There are al...

This will be a blog series where we’ll do a deep dive into the Mercusys MB115-4G router. In this first post, we’ll cover the workflow from receiving the device to gaining a root shell via UART and ...