Read The CC

Copy My Write

Abusing DDMA alongside Copy on Write for cross-process code execution leading to a $3000 Bug Bounty.

Runtime Hyper-V Hijacking

Attacking Hyper-V at runtime with disk DMA, page table manipulation, and shellcode

Abusing Windows Crash Dumps

Utilizing Windows system-wide crash dumps for memory introspection of protected memory for analysis.

Automatic Pathfinding in Escape From Tarkov

Pathfinding through levels in Escape From Tarkov without any memory introspection