j00ru.vexillium.org

• charset: UTF-8
• name: robots content: max-image-preview:large
• name: viewport content: width=device-width, initial-scale=1
• name: generator content: WordPress 6.9

• Skip to content
• Home
• http://j00ru.vexillium.org/#
• 32-bit
• 64-bit
• 32-bit
• 64-bit
• CSRSS API List
• CSRSS API Table
• MSDN user-mode report
• MSDN kernel-mode report
• Conference talks
• Articles and papers
• About me
• Exploiting a Windows 10 PagedPool off-by-one overflow (WCTF 2018)
• https://j00ru.vexillium.org/author/j00ru/
• https://j00ru.vexillium.org/wp-content/uploads/2018/07/wctf_scoreboard.png
• Read more
• 7 Comments
• Wrapping up the kernel infoleak research with a whitepaper
• Announcing Bochspwn Reloaded and my REcon Montreal 2017 slides
• https://j00ru.vexillium.org/slides/2017/recon.pdf
• slides
• slides
• Read more
• 2 Comments
• https://j00ru.vexillium.org/2013/05/syscan-2013-bochspwn-paper-and-slides/
• https://j00ru.vexillium.org/2013/08/black-hat-usa-2013-bochspwn-slides-and-pointers/
• Read more
• 4 Comments
• Windows Kernel Local Denial-of-Service #5: win32k!NtGdiGetDIBitsInternal (Windows 7-10)
• Windows Kernel Local Denial-of-Service #4: nt!NtAccessCheck and family (Windows 8-10)
• Windows Kernel Local Denial-of-Service #3: nt!NtDuplicateToken (Windows 7-8)
• Windows Kernel Local Denial-of-Service #2: win32k!NtDCompositionBeginFrame (Windows 8-10)
• DoS in win32k!NtUserThunkedMenuItemInfo
• Read more
• 2 Comments
• Windows Kernel Local Denial-of-Service #4: nt!NtAccessCheck and family (Windows 8-10)
• Read more
• 3 Comments
• Windows Kernel Local Denial-of-Service #3: nt!NtDuplicateToken (Windows 7-8)
• Read more
• 8 Comments
• Windows Kernel Local Denial-of-Service #2: win32k!NtDCompositionBeginFrame (Windows 8-10)
• Read more
• 10 Comments
• Windows Kernel Local Denial-of-Service #1: win32k!NtUserThunkedMenuItemInfo (Windows 7-10)
• [1]
• [2]
• [3]
• Read more
• 12 Comments
• Slides about my Windows Metafile research and fuzzing now public
• Read more
• 2 Comments
• Windows system call tables updated, refreshed and reworked
• Next
• https://j00ru.vexillium.org/page/10/
• http://j00ru.vexillium.org/mailto:[email protected]
• July 2018
• June 2017
• April 2017
• March 2017
• February 2017
• November 2016
• August 2016
• July 2016
• June 2016
• September 2015
• June 2015
• March 2015
• October 2014
• May 2014
• April 2014
• January 2014
• November 2013
• September 2013
• August 2013
• July 2013
• June 2013
• May 2013
• April 2013
• January 2013
• December 2012
• November 2012
• October 2012
• September 2012
• August 2012
• July 2012
• May 2012
• April 2012
• January 2012
• December 2011
• November 2011
• October 2011
• September 2011
• August 2011
• July 2011
• June 2011
• May 2011
• February 2011
• January 2011
• October 2010
• September 2010
• July 2010
• June 2010
• May 2010
• April 2010
• January 2010
• November 2009
• October 2009
• August 2009
• July 2009
• May 2009
• March 2009

• See on GitHub
• WCTF
• Dragon Sector
• participants
• Bochs
• video
• video
• https://recon.cx/2017/montreal/
• https://recon.cx/2017/montreal/talks/bochspwn.html
• Gynvael
• kfetch-toolkit
• GetDIBits
• BitBlt
• StretchBlt
• issue #1078
• MSDN
• EtwWrite
• Xenpwn
• ProbeForRead
• Ruxcon
• PacSec
• Black Hat Europe
• Security PWNing Conference
• Google Project Zero tracker
• 18 issues
• https://twitter.com/j00ru
• https://www.linkedin.com/in/j00ru/
• https://github.com/j00ru
• GeneratePress

            Domain Name: VEXILLIUM.ORG

Registrar: eNom, LLC

Domain Status: active

Registry Expiry Date: 2030-04-06T10:50:48.106Z

Creation Date: 2004-04-06T10:50:48.106Z

Updated Date: 2021-03-07T10:03:02.276Z

Name Server: DNS1.DOMENY.TV

Name Server: DNS2.DOMENY.TV

REGISTRAR Contact: eNom, LLC

>>> Last update of RDAP database: 2026-07-20T01:08:59Z         

			User-agent: *
Disallow: /wp-admin/
Allow: /wp-admin/admin-ajax.php

Sitemap: https://j00ru.vexillium.org/wp-sitemap.xml