Reverse Engineering the Win32k Type Isolation Mitigation
blog.quarkslab.com | research | #windows | #reverse-engineering | #kernel | #exploit-mitigation | #quarkslab | #win32k
Summary
How Win32k Type Isolation (Windows 10 1709) splits the memory layout of SURFACE/Bitmap kernel objects to kill popular GDI Bitmap exploitation primitives; a deep, binary-level reconstruction.
- Published
- Collected
Skip to content