˗ˋˏ♡ˎˊ˗

Windows

• Windows Kernel Research

  • Nqd8VId6
  • brant-ruan’s blog
  • 二进制学习笔记

• Endpoint Security

  • EDR

    • EDR: Detections, Bypassess And Other Shenanigans
    • A story about tampering EDRs
    • Maelstrom: EDR Kernel Callbacks, Hooks, and Call Stacks
    • Windows Kernel Ps Callbacks Experiments

  • Windows Defender Driver

    • Dissecting the Windows Defender Driver - WdFilter (Part 1)

• How to Start Drivering？

  • Nice Site：apriorit
    • Writing a Windows Driver Model Driver: A Step-by-Step Guide
  • Mini-Filter
    • Hunting for Bugs in Windows Mini-Filter Drivers

• How to LoadLibrary ？

  • Part 1: Digging deep into LoadLibrary

• Win32k CVE

  • Anatomy of an exploit in Windows win32k – CVE-2022-21882

• Hypervisor

  • Hypervisor、VT
  • Hypervisor From Scratch
  • MMU Virtualization via Intel EPT: Technical Details

• Windows Vulnerability Exploitation Research

  • Windows Exploit Development Tutorial Series—UAF/RPO/NULL Point/POOL Overflow/GDI
  • Windows内核系列

Linux

Linux 应用层	Linux 内核
Online, Freely site for learning Linux：Linux Journey	1、《 Linux Kernel Programming-Packt Publishing Part 1 (2021)》 2、Linux 内核揭秘（Linux insides 中文版）
C 库 API 函数、文件格式和调用约定等：Linux man pages：user commands、system calls、library function、special files、file formats、conventions and miscellany、administration and privileged commands 例如：system calls - Linux man pages	1、Linux 内核源代码