RT @sixtyvividtails: cmd /v/k"set A=A&(for /L %i in (1,1,9)do set A=!A!!A!)&set R=reg add HKLM\SYSTEM\CurrentControlSet\Services\scmbus /f….

I've finally had time to update the article, thank you @sixtyvividtails and @_winterknife_ for your insights!.

If you're exploiting a driver offering R/W access to physical memory on Win11 24H2, you can leverage this simple trick to circumvent kernel address leak restrictions and retrieve the kernel base address :p. #exploitdev #driverexploitation.

RT @0xfluxsec: Here it is: my research on Alternate Syscalls for Windows 11! There are still a few other facets to….

RT @5mukx: Exploiting eneio64.sys Kernel Driver on Windows 11 by Turning Physical Memory R/W into Virtual Memory R/W. .