hacks & tools
Kernel exploitation: weaponizing CVE-2020-17382 MSI Ambient Link driver
Silencing the EDR. How to disable process, threads and image-loading detection callbacks.
Distrusting the patch: a run through my first LPE 0-day, from command injection to path traversal