Introduction Yep, we are looking at Apple now. The Windows kernel was starting to feel way too high-level: subsystems, drivers, minifilters… all of that is fine, but I want to go lower. And while ...

On Tuesday, July 14, Microsoft released the largest Patch Tuesday update in its history, fixing more than 600 vulnerabilities. A bug I reported to Microsoft on May 17 was patched as CVE-2026-50458 ...

Introduction In this blog I am going to explain several objects and exploitation techniques that are pretty well known when exploiting the Windows kernel paged pool. For the bug itself I will use o...

Introduction In this post I will walk through the root cause analysis of a vulnerability in a Windows minifilter driver. Along the way, I will also cover the background needed to understand what m...

Introduction In the previous post, I started my path into Windows kernel exploitation. The next step I wanted to tackle was the dynamic allocator. This part has always interested me much more tha...

Introduction This post is part of an idea I have been wanting to explore for a while: building the kind of HEVD material I wish I had when I started with Windows kernel exploitation. There are al...

This will be a blog series where we’ll do a deep dive into the Mercusys MB115-4G router, which, as of today (02/17/2026), is the best-selling router on Amazon Spain. In this first post, we’ll cover...