Kernel Primitives To Code Execution On Windows 11 VBS/HVCI/kCET (SSDT/SSDT Shadow Hooks)
Where
Talks
hack.lu 2026
Duration
—
Explains how kernel primitives can lead to code execution on Windows 11 with VBS, HVCI and kCET enabled.
Summary
No summary yet — watch the video above, or open it on YouTube.
Related talks
Talks·34 min
Omer Tsarfati
Explores vulnerable drivers shipped with peripheral devices and the risks they create for the systems that load them.
vulnerability-researchwindowskernel+3
Main Stage·40 min
Angelo Caccia
Revives a PPL injection technique to reach a protected Windows process, then abuses a System Guard kernel driver to freeze Microsoft Defender.
windowskernelexploitation+2
Talks·38 min
Jarno Niemelä
Shows how misconfigured file permissions in Windows software let a low-privileged user escalate to admin rights.
windowsvulnerability-researchvulnerabilities+2