Defeating KASLR by Doing Nothing at All

A study of pointer-keyed data structures and how they can leak pointer values across security boundaries, undermining ASLR, with examples and defensive recommendations.

An examination of how null pointer dereferences in the Linux kernel can be turned into exploitable primitives under modern configurations, with examples and mitigations.

A Windows exploitation technique post showing how path lookup behavior can be leveraged to reliably win race conditions, with worked examples and exploitation implications.

Part one of a macOS audio series: building a fuzzer for CoreAudio by sending Mach messages, covering the attack surface, harness design, and early results.

Part 6 of the Windows Registry Adventure series, examining kernel-mode registry objects and the additional attack surface they expose to privilege escalation research.

The 2025 refresh of a Windows exploitation technique that traps and intercepts virtual memory access, building reliable exploitation primitives, with updated caveats.