Patch Diffing Windows: MSU Internals and Helper Scripts
Patch diffing Windows binaries is one of the most direct paths into vulnerability research, n-day exploit development, and Windows internals.…
Read More →
The Real LFH Activation Behavior (NT Heap)
It has long been known that the LFH activates around the 17th allocation. However, those who have experimented with this…
Read More →
WinAFL EXE Fuzzing
Info: The relevant code for this post can be found here: https://github.com/0xZ0F/WinAFLEXEHarness There are a handful of great guides on…
Read More →
Extending PE Sections
Warning: A basic understanding of the PE header is assumed. Tip: Source code referenced can be found under my “PESENT”…
Read More →
Heap CTF: LevelOne
This CTF mimics some of the real heap exploits I’ve seen and made. It aims to provide unique challenges while…
Read More →