Exploiting Windows
Matt Miller, Ken Johnson, Bypassing Windows Hardware-enforced Data Execution Prevention (PDF)bugcheck, Matt Miller, Kernel-mode Payloads on Windows (PDF)Ken Johnson, Matt Miller, Exploiting the Otherwise Non-exploitable on Windows (PDF)Ken Johnson, Getting out of Jail: Escaping Internet Explorer Protected Mode (PDF)mxatone, Analyzing local privilege escalations in win32k (PDF)
