Using Undocumented CPU Behavior to See Into Kernel Mode and Break KASLR in the Process

MalwareBlack Hat43 minExpert Open on YouTube ↗

Industry experts analyze emerging threats surrounding Using Undocumented CPU Behavior to See Into Kernel Mode and Break KASLR in the Process.

Summary

Uses undocumented CPU behavior to see into kernel mode and break KASLR.

Related talks

Black Hat·47 min

Black Hat
Malware
Date: 2025
Location: Black Hat

Kernel Mode Threats and Practical Defenses

Presenters detail vulnerability discovery and exploitation in Kernel Mode Threats and Practical Defenses.

kernelmodethreat+2

Hacktivity - IT Security Festival·22 min

HACKTIVITY
Malware
Date: 2024
Location: Hacktivity

#Hacktivity2021 // GhostEmperor: From ProxyLogon to Kernel Mode, Story of a Modern Day Rootkit

Analysts investigate attack surfaces and defenses concerning #Hacktivity2021 // GhostEmperor: From ProxyLogon to Kernel Mode, Story of a Modern Day Rootkit.

rootkitkernelhacktivity2021+3

Black Hat·1 hr 9 min

Black Hat
Malware
Date: 2025
Location: Black Hat

Demigod: The Art of Emulating Kernel Rootkits

Security researchers examine technical aspects of Demigod: The Art of Emulating Kernel Rootkits.

kernelkernel-rootkitsdemigod+3