The Curious Engineer

All blogs / Security

Satoshi’s notes

tandasat.github.io/blog

Thoughts and notes about platform security, reverse engineering, system programming and other low-level stuff.

SecurityWindows internalsReverse engineering

’23’24’25’26
Posts
10 from 19 Mar 2023 to 2 Apr 2025
Posting
now and then
Kind
personal blog
Feed
https://tandasat.github.io/blog/feed.xml

2025 1

  1. What keeps kernel shadow stack effective against kernel exploits?

2024 4

  1. SMM isolation - Security policy reporting (ISSR)
  2. SMM isolation - SMI deprivileging (ISRD)
  3. Hypervisor enforced security policies for NTOS, secure kernel and a child partition
  4. Hunting down the HVCI bug in UEFI

2023 5

  1. How I found Microsoft Hypervisor bugs as a by-product of learning
  2. Intel VT-rp - Part 2. paging-write and guest-paging verification
  3. Intel VT-rp - Part 1. remapping attack and HLAT
  4. Setting up KDNET over USB EEM for Bootloader and Hyper-V debugging
  5. New blog!