<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title>KernelSight</title>
  <link href="https://splintersfury.github.io/KernelSight/" />
  <link rel="self" href="https://splintersfury.github.io/KernelSight/feed.xml" />
  <id>https://splintersfury.github.io/KernelSight/</id>
  <updated>2026-10-03T00:00:00Z</updated>
  <author>
    <name>Ahmad Abdillah Bin Zaini</name>
  </author>
  <entry>
    <title>PTE Manipulation</title>
    <link href="https://splintersfury.github.io/KernelSight/primitives/arw/pte-manipulation/" />
    <id>https://splintersfury.github.io/KernelSight/primitives/arw/pte-manipulation/</id>
    <updated>2026-10-03T00:00:00Z</updated>
    <summary>Primitives: PTE Manipulation</summary>
  </entry>
  <entry>
    <title>Zerodium: the market maker</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/zerodium/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/zerodium/</id>
    <updated>2026-10-03T00:00:00Z</updated>
    <summary>Highlights: Zerodium: the market maker</summary>
  </entry>
  <entry>
    <title>Juan Sacco / Exploit Pack: DOG</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/juan-sacco-dog/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/juan-sacco-dog/</id>
    <updated>2026-10-03T00:00:00Z</updated>
    <summary>Highlights: Juan Sacco / Exploit Pack: DOG</summary>
  </entry>
  <entry>
    <title>hfiref0x: the tool smith</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/hfiref0x-kdu/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/hfiref0x-kdu/</id>
    <updated>2026-10-03T00:00:00Z</updated>
    <summary>Highlights: hfiref0x: the tool smith</summary>
  </entry>
  <entry>
    <title>DEVCORE: the subsystem hunters</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/devcore-streaming/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/devcore-streaming/</id>
    <updated>2026-10-03T00:00:00Z</updated>
    <summary>Highlights: DEVCORE: the subsystem hunters</summary>
  </entry>
  <entry>
    <title>Connor McGarr: the mitigation analyst</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/connor-mcgarr/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/connor-mcgarr/</id>
    <updated>2026-10-03T00:00:00Z</updated>
    <summary>Highlights: Connor McGarr: the mitigation analyst</summary>
  </entry>
  <entry>
    <title>kCFG / kCET</title>
    <link href="https://splintersfury.github.io/KernelSight/mitigations/kcfg-kcet/" />
    <id>https://splintersfury.github.io/KernelSight/mitigations/kcfg-kcet/</id>
    <updated>2026-10-03T00:00:00Z</updated>
    <summary>Defenses: kCFG / kCET</summary>
  </entry>
  <entry>
    <title>HLAT</title>
    <link href="https://splintersfury.github.io/KernelSight/mitigations/hlat/" />
    <id>https://splintersfury.github.io/KernelSight/mitigations/hlat/</id>
    <updated>2026-10-03T00:00:00Z</updated>
    <summary>Defenses: HLAT</summary>
  </entry>
  <entry>
    <title>Free Writable Area (FWA)</title>
    <link href="https://splintersfury.github.io/KernelSight/primitives/exploitation/fwa/" />
    <id>https://splintersfury.github.io/KernelSight/primitives/exploitation/fwa/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Primitives: Free Writable Area (FWA)</summary>
  </entry>
  <entry>
    <title>Volodya / BuggiCorp</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/volodya-buggicorp/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/volodya-buggicorp/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Highlights: Volodya / BuggiCorp</summary>
  </entry>
  <entry>
    <title>SpyBoy / Terminator: the EDR-killer economy</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/spyboy-terminator/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/spyboy-terminator/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Highlights: SpyBoy / Terminator: the EDR-killer economy</summary>
  </entry>
  <entry>
    <title>The BYOVD operators</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/ransomware-byovd-operators/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/ransomware-byovd-operators/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Highlights: The BYOVD operators</summary>
  </entry>
  <entry>
    <title>PlayBit / luxor2008</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/playbit-luxor2008/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/playbit-luxor2008/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Highlights: PlayBit / luxor2008</summary>
  </entry>
  <entry>
    <title>James Forshaw: the primitives librarian</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/james-forshaw/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/james-forshaw/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Highlights: James Forshaw: the primitives librarian</summary>
  </entry>
  <entry>
    <title>j00ru: the win32k decade</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/j00ru-win32k-decade/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/j00ru-win32k-decade/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Highlights: j00ru: the win32k decade</summary>
  </entry>
  <entry>
    <title>The CLFS contractor</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/clfs-contractor/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/clfs-contractor/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Highlights: The CLFS contractor</summary>
  </entry>
  <entry>
    <title>Candiru / Sourgum</title>
    <link href="https://splintersfury.github.io/KernelSight/notable-exploits/candiru-sourgum/" />
    <id>https://splintersfury.github.io/KernelSight/notable-exploits/candiru-sourgum/</id>
    <updated>2026-10-02T00:00:00Z</updated>
    <summary>Highlights: Candiru / Sourgum</summary>
  </entry>
  <entry>
    <title>LSA Protection</title>
    <link href="https://splintersfury.github.io/KernelSight/mitigations/lsa-protection/" />
    <id>https://splintersfury.github.io/KernelSight/mitigations/lsa-protection/</id>
    <updated>2026-10-01T00:00:00Z</updated>
    <summary>Defenses: LSA Protection</summary>
  </entry>
  <entry>
    <title>Driver Signature Enforcement</title>
    <link href="https://splintersfury.github.io/KernelSight/mitigations/dse/" />
    <id>https://splintersfury.github.io/KernelSight/mitigations/dse/</id>
    <updated>2026-10-01T00:00:00Z</updated>
    <summary>Defenses: Driver Signature Enforcement</summary>
  </entry>
  <entry>
    <title>Vulnerable Driver Blocklist</title>
    <link href="https://splintersfury.github.io/KernelSight/mitigations/driver-blocklist/" />
    <id>https://splintersfury.github.io/KernelSight/mitigations/driver-blocklist/</id>
    <updated>2026-10-01T00:00:00Z</updated>
    <summary>Defenses: Vulnerable Driver Blocklist</summary>
  </entry>
</feed>
