Research

2 articles, newest first.

2026

Sep 17, 2026

PivotGate: Syscalls Without Stack Fiction

PivotGate turns a hidden discontinuity in ntdll's syscall layout into an SSN resolver, then crosses the boundary through the genuine Windows wrapper—without decoding the requested stub, generating executable code or inventing a stack.

Windows Internals#windows-internals #syscalls #ntdll #hardware-breakpoints

11 min

Sep 13, 2026

Inside a Rare Kernel Anti-Cheat CTF: Small Mistakes, Huge Attack Surface

TBMKE defends two integers with a game process, a watchdog and a self-signed kernel driver. A handle taken before the driver arms, a record with no authenticator and a hash that turns itself off are enough to take both.

Reversing#game-hacking #anti-tamper #kernel #windows-drivers

22 min