How I used the WTF fuzzing framework to find bugs in the GoldSrc engine and exploit a stack buffer overflow for RCE in Counter-Strike 1.6.

A deep dive into Spectre and Meltdown, two hardware-level vulnerabilities that traded security for performance.

Deep dive into attacking the winload Code Integrity and revealing new techniques

Analysing my ASM Bootkit that patches DSE at boot allowing to load unsigned drivers

Analysing first bootkit that abuses SSDT hooking to infects kernel with backdoor

Analysing my UEFI Bootkit with usermode communication

Bypassing security mechanisms to exploit an arbitrary physical memory read vulnerability in a temperature monitoring software driver.