Lê Văn Hùng @iam_hscorpion

Security Researcher 🇻🇳 Earth Joined March 2018

Tweets

105
Followers

36
Following

486
Likes

1K

Crowdfense @crowdfense

3 days ago

Technical deep-dive into CVE-2025-53149, a heap-based buffer overflow in the Windows Kernel Streaming WOW Thunk Service driver (ksthunk.sys). crowdfense.com/cve-2025-53149…

1 37 111 18K 69

Andrea Allievi @aall86

3 weeks ago

I am out from the exploitation world since 8 years ago now, but exploits.forsale/pwn2own-2024/ is a very nice reading. Well done @carrot_c4k3 ! Kudos!

1 20 113 9K 68

Alex Plaskett @alexjplaskett

a month ago

Out Of Control: How KCFG and KCET Redefine Control Flow Integrity in the Windows Kernel by @33y0re i.blackhat.com/BH-USA-25/Pres…

0 37 129 16K 64

Download Image

nafiez @zeifan

4 weeks ago

Same stuff different week. I did an analysis on ampa.sys driver and write PoC exploiting the driver. You can find the analysis and PoC here, zeifan.my/Ampa-Driver-An…

0 33 97 6K 59

[Research] CVE-2025-24985: Windows Fast FAT Driver RCE Vulnerability hackyboiz.github.io/2025/07/17/ogu… The vulnerability was caused by the ability to control five variables within the VHD file that determine the number of clusters.

1 39 109 6K 47

Download Image

ö @r0keb

2 months ago

Good morning! Just published a blog post diving into Windows Kernel Pool internals: basics, memory allocation functions, internal structures, and how Segment Heap, LFH, and VS work. r0keb.github.io/posts/Windows-…

4 135 404 31K 233

David Hendrickson @TeksEdge

4 months ago

Many are asking why Microsoft's announcement of MCP for Windows OS is significant. Windows OS is now AI-agent accessible. Take a look at this ex. AI-OS. Replace LLM System Call Interface with Microsoft's new Windows OS MCP. The world's most used OS is now AI agent accessible.

30 65 300 109K 229

Download Image

DEVCORE @d3vc0r3

4 months ago

Our latest deep dive explores research on Windows Kernel Streaming. Check out Angelboy’s (@scwuaptx) write-up for key insights and analysis. Read more here: devco.re/blog/2025/05/1… #VulnerabilityResearch #Cybersecurity #WindowsKernel #OffensiveCon

1 39 140 12K 64

Kristal @gal_kristal

4 months ago

A cool project on an undocumented feature in the Windows kernel. I partially researched it some time ago, but unfortunately, it seems that it's locked for Microsoft usage only. My reversing notes: gist.github.com/Kristal-g/eec0…

flux @0xfluxsec

4 months ago

4 52 171 18K 108

0 14 70 7K 41

ö @r0keb

4 months ago

Just dropped a blog post on NtQuerySystemInformation changes that killed an old kASLR bypass. Added some internals research too, pre & post 24H2. Check it out! r0keb.github.io/posts/kASLR-In…

1 29 90 5K 48

William R. Messmer @wmessmer

5 months ago

If you update WinDbg today (1.2504.15001.0), you might notice another icon in the View tab of the ribbon, one called "Parallel Stacks". While incredibly useful in its own right, this isn't just a parallel stacks view. It's the introduction of graph visualization for extensions!

4 60 180 20K 60

Download Image

PatchPoint.Official @_patchpoint_

5 months ago

🚀 We released a demo video for the CVE-2025-26666 Windows Media RCE Vulnerability, patched by Microsoft in Apr 2025. Watch the video and subscribe to our private vulnerability PoC and detailed report service at Patchpoint.io. youtu.be/tss6bYCIMkQ…

0 14 34 10K 21

Alex Plaskett @alexjplaskett

5 months ago

One Bug to Rule Them All: Stably Exploiting a Preauth RCE Vulnerability on Windows Server 2025 by @edwardzpeng @Ver0759 Zishan Lin i.blackhat.com/Asia-25/Asia-2…

0 48 191 25K 100

Download Image

Nathan Blondel @slowerzs

5 months ago

Think HVCI and kCET mean the end of kernel code execution? I wrote a blogpost exploring an alternative way to execute a kernel payload! :) blog.slowerzs.net/posts/keyjumpe…

4 118 283 40K 158

Satoshi Tanda @standa_t

5 months ago

The new blog post on supervisor shadow stack restrictions / supervisor shadow-stack control tandasat.github.io/blog/2025/04/0…

0 62 158 13K 75

starlabs @starlabs_sg

6 months ago

CimFS: Crashing in memory, Finding SYSTEM! @cplearns2h4ck dug into Microsoft CimFS, found a sneaky 0-day, and guess what? The fix by Microsoft was just locking the door 🔐on unprivileged users. 😂 Dive into the adventure with us: starlabs.sg/blog/2025/03-c…

1 60 164 38K 76

ESET Research @ESETresearch

6 months ago

#ESETresearch has discovered a zero day exploit abusing #CVE-2025-24983 vulnerability in Windows Kernel to elevate privileges (#LPE). First seen in the wild in March 2023, the exploit was deployed through #PipeMagic backdoor on the compromised machines. 1/4

3 73 200 25K 68

Download Image

MrAle98 @MrAle_98

6 months ago

Developed an exploit for CVE-2025-21333 (quite unreliable): vulnerability in vkrnlintvsp.sys. Exploit code: github.com/MrAle98/CVE-20… Exploits a paged pool overflow overwriting a _IOP_MC_BUFFER_ENTRY*. Hope you find it useful in case not already shown🙂.

9 105 379 34K 161

Suraj Malhotra @MrT4ntr4

6 months ago

Inspired by @Steph3nSims , I decided to dig into🛡️Windows Defender Exploit Guard myself. Here is the Part-1 of "Reversing Exploit Guard" series, where I break down how it hooks critical functions and defends against stack pivoting. mrt4ntr4.github.io/Exploit-Guard-…