BYOVD bypass DSE with VBS enabled
11 min read
Using vulnerable driver to circumvent DSE with VBS enabled to install unsigned driver
/ tags/ Malware
Return address spoofing in zig
15 min read
Implementing return address spoofing in Zig — navigating Zig compiler optimizations, x64 calling conventions, and assembly-level debugging
Direct System Calls in Zig: Building zcircuit
13 min read
A deep technical dive into zcircuit, a Zig library that implements Hell's Gate, TartarusGate, and Hell's Hall techniques for direct and indirect Windows syscall execution.