vp777/windows-kernel-exploitationTechniques and tools for Windows kernel exploitation, covering pool overflow exploitation, segment heap metadata abuse, and debugging scripts for heap inspection.
Techniques based on named pipes for pool overflow exploitation demonstrated on CVE-2020-17087 and an off-by-one overflow
Techniques for turning a potentially limited write primitive (eg a pool overflow) into overlapping chunk allocations by abusing segment heap VS allocator metadata
Currently includes a windbg script for inspecting the internal state of segment heap
