https://bsky.app/profile/wetw0rk7.bsky.socialhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3m3s2u3fvvs2fReleased my write for gaining a fundamental understanding of the Windows _SECURITY_DESCRIPTOR structure. I then created a custom Windows Kernel shellcode stub to perform process injection for privilege escalation which is also implemented in Sickle :P https://wetw0rk.github.io/posts/understanding-the-windows-_security_descriptor/22 Oct 2025 14:33 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3m3s2u3fvvs2fhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3m33f6ntmvs2kTrick or Treat!! Would you still love my malware if it was a worm 🥺❤️? Sickle V4 has added a handler module for easy payload distribution and yes, you can do it over HTTPS! Download it here: https://github.com/wetw0rk/Sickle/13 Oct 2025 14:07 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3m33f6ntmvs2khttps://bsky.app/profile/wetw0rk7.bsky.social/post/3lhpdm6xfg22zAnyone hungry for a🍪? Today we learn about Stack Cookies! Also known as Canaries! This will be the last tutorial within the Windows Kernel Exploitation series. As of today all 10 tutorials are available for English speakers! https://wetw0rk.github.io/posts/0x09-return-of-the-stack-overflow/09 Feb 2025 00:08 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lhpdm6xfg22zhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3lglcjdrw4c2cAre you ready for an introduction to Windows Kernel Race Conditions? You can find the tutorial below :) https://wetw0rk.github.io/posts/0x07-introduction-to-windows-kernel-race-conditions/25 Jan 2025 16:13 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lglcjdrw4c2chttps://bsky.app/profile/wetw0rk7.bsky.social/post/3lg5je2lkps22Type Confusions pueden ser... difícil, especialmente cuando se trata de una versión más moderna de Windows. Hoy explotamos uno contra Windows 11 (x64). Un saludo a @w4fz5uck5 y @xct_de! Por ayudarme a superar esto! Puedes encontrar el tutorial aquí: https://wetw0rk.github.io/posts/0x06-acerc%C3%A1ndose-a-windows-kernel-type-confusions-modernos/20 Jan 2025 04:38 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lg5je2lkps22https://bsky.app/profile/wetw0rk7.bsky.social/post/3lfzvpcr5nk2wType Confusions can be… confusing, especially when targeting a more modern version of Windows. Today we exploit one against Windows 11 (x64). Shoutout to @w4fz5uck5 and @xct_de for helping me get through this one! You can find the tutorial here: https://wetw0rk.github.io/posts/0x06-approaching-modern-windows-kernel-type-confusions/18 Jan 2025 18:08 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lfzvpcr5nk2whttps://bsky.app/profile/wetw0rk7.bsky.social/post/3lffjkloyjs24Mmm… Hrmmmmm… Mmm… mmm… Mm! Oh-hoh! Perdóname. Estaba absorto en mis pensamientos. Esta semana veremos una introducción a Type Confusions dentro del kernel de Windows! Más específicamente Windows 7 (x86). Puedes encontrar el tutorial aquí! https://wetw0rk.github.io/posts/0x05-introducci%C3%B3n-a-windows-kernel-type-confusion-vulnerabilidades/10 Jan 2025 15:37 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lffjkloyjs24https://bsky.app/profile/wetw0rk7.bsky.social/post/3lfcydnhltc2fMmm… Hrmmmmm… Mmm… mmm… Mm! Oh-hoh! Forgive me. I was absorbed in thought. This week, we’ll get an Introduction to Type Confusions within the Windows Kernel! More specifically Windows 7 (x86). You can find the link to the tutorial down below! https://wetw0rk.github.io/posts/0x05-introduction-to-windows-kernel-type-confusion-vulnerabilities/09 Jan 2025 15:24 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lfcydnhltc2fhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3lf2eyfxqfc2iSe me ocurrió algo más gracioso que 24… 25. Qué mejor manera de comenzar 2025 que con una introducción a una vulnerabilidad Write-What-Where dentro del kernel de Windows 7 (x86) y Windows 11 (x64)! Puedes encontrar el tutorial aquí: https://wetw0rk.github.io/posts/0x04-escribiendo-que-donde-en-el-kernel/06 Jan 2025 05:16 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lf2eyfxqfc2ihttps://bsky.app/profile/wetw0rk7.bsky.social/post/3lex7t5d3as2rI thought of something funnier than 24… 25. What better way to start 2025 than with an introduction to a Write-What-Where vulnerability within the Windows 7 (x86) and Windows 11 (x64) Kernel! You can find the tutorial here: https://wetw0rk.github.io/posts/0x04-writing-what-where-in-the-kernel/04 Jan 2025 23:06 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lex7t5d3as2rhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3ldtwyetrjs2jLa semana pasada aprovechamos una vulnerabilidad de heap en el Windows 7 (x86) Kernel. Esta semana, un sistema más moderno - Windows 11 (x64)! El tutorial se puede encontrar aquí: https://wetw0rk.github.io/posts/0x03-acerc%C3%A1ndose-al-heap-moderno-del-windows-kernel/21 Dec 2024 22:25 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3ldtwyetrjs2jhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3ldtwxoosz22jLast week, we successfully exploited a Windows Kernel vulnerability in the heap on a Windows 7 (x86) system. This week, we're targeting a more modern OS - Windows 11 (x64)! Check out the tutorial here: https://wetw0rk.github.io/posts/0x03-approaching-the-modern-windows-kernel-heap/21 Dec 2024 22:24 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3ldtwxoosz22jhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3ldi6qhrazc2mSickle v3.1.0 is out!! Shellcode generation is now supported and I've added 9 new payloads including a reflective loader for Linux on both AARCH64 and x64! Along with a new module asm_shell which supports x86, x64, and AARCH64! Check it out here: github.com/wetw0rk/Sickle https://github.com/wetw0rk/Sickle17 Dec 2024 06:12 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3ldi6qhrazc2mhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3ldfezroink2yEn la serie de Windows Kernel Exploitation hemos aprovechado la vulnerabilidad de “Stack Overflow” contra Windows 7 (x86) y Windows 11 (x64). Esta semana volveremos a Windows 7 (x86) y vamos a exploit un Use-After-Free dentro del Windows Kernel! https://wetw0rk.github.io/posts/0x02-introducci%C3%B3n-a-windows-kernel-uafs/16 Dec 2024 03:26 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3ldfezroink2yhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3ldclsds7a22jSo far in the Windows Kernel Exploitation series we have successfully exploited a Stack Overflow against both Windows 7 (x86) and Windows 11 (x64). This week you'll be getting an introduction on how to exploit a Use-After-Free within the Windows Kernel! https://wetw0rk.github.io/posts/0x02-introduction-to-windows-kernel-uafs/15 Dec 2024 00:49 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3ldclsds7a22jhttps://bsky.app/profile/wetw0rk7.bsky.social/post/3ldagbl24d22cIt’s that time of the year, when you put your elf on a shelf and your ELFs in memory. Sickle now supports payload generation for reflective ELF loading! Currently AARCH64 (ARM64) and x86-64 supported. May your ELF payloads never touch disk! github.com/wetw0rk/Sickle14 Dec 2024 04:05 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3ldagbl24d22chttps://bsky.app/profile/wetw0rk7.bsky.social/post/3lctakd3kns2gEs hora de aprender a evitar las mitigaciones modernas de Windows! Como parte de este próximo tutorial, estoy revelando Violet Phosphorous, una técnica para evadir SMEP/VBS! Puedes encontrar el primer tutorial aqí: https://wetw0rk.github.io/posts/0x01-mat%C3%A1ndo-windows-kernel-mitigaciones/08 Dec 2024 22:18 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lctakd3kns2ghttps://bsky.app/profile/wetw0rk7.bsky.social/post/3lcp5gjlhns2qIt's time to learn how to bypass the latest mitigations deployed on Windows. As part of this next tutorial, I am dropping Violet Phosphorous, a SMEP/VBS bypass tested against the latest Windows 11 (x64) build as of today! You can find the post here: https://wetw0rk.github.io/posts/0x01-killing-windows-kernel-mitigations/07 Dec 2024 07:12 +0000at://did:plc:ol6ncxi427sjerbcbyph7ozb/app.bsky.feed.post/3lcp5gjlhns2q