A highly specialized Security Researcher and Systems Engineer focusing on Windows kernel exploitation, anti-cheat evasion, and reverse engineering. The profile demonstrates expert-level knowledge of low-level OS internals, including HVCI, PatchGuard, and driver manipulation, primarily leveraging C and C++ to build offensive security tools and bypass techniques.
Projects deal with extremely difficult domains: kernel exploitation, hypervisor interaction, and undocumented OS structures.
Most repositories lack build instructions, prerequisites, or architectural details; several rely on simple READMEs without code comments.
High-star repositories like `mhydeath` and `Shadow-Regions-Bypass` are flagged as missing source code or logic, reducing auditability.
Demonstrates novel approaches to bypassing modern security mitigations (HVCI, protected processes) rather than just forking existing tools.
Deep understanding demonstrated by projects targeting HVCI, PatchGuard, and Shadow Regions (`ZeroHVCI`, `Demystifying-PatchGuard`).
Created `ReverseKit`, a comprehensive dynamic analysis toolkit, and successfully reversed packed signed drivers.
Primary languages used for complex system-level programming, hooking, and memory manipulation across all major repositories.
Actively weaponizes known vulnerabilities (CVE-2018-19320 in `GDRVLoader`) and explores abuse of legitimate drivers (`mhydeath`, `NVDrv`).
Specific focus on high-profile targets like Vanguard and mhyprotect, developing specialized bypass techniques.
