Enes Şakir Çolak

Create a bash file to echo this embarrassing nonsense and you can be a l33t hacker too: [+] Leaking kaslr [*] kaslr addr: 0xffffffff9a200000 [+] Start racing [*] Race success [+] Start heap spraying [*] Spraying finish [*] Get heap address: 0xffff8a7b2e9d9800 [*] Exploit Finish

Checkout my latest blog on fixing the mimikatz for windows 11 24H2 @tanrikuluatahan/fixing-mimikatz-sekurlsa-logonpasswords-on-windows-11-24h2-25h2-253e82866197" target="_blank" rel="nofollow noopener">medium.com/@tanrikuluatah…

GitHub - Nightmare-Eclipse/BlueHammer: Repository hosting the bluehammer vulnerability · GitHub - github.com/Nightmare-Ecli…

github.com/magicsword-io/… found a 21KB kernel driver from 2004 built for windows xp that still loads on windows 11 ASTRA64.sys by EnTech Taiwan. signed in 2006, cert expired in 2007, but its timestamped so windows still says "signature verified" 19 years later. the company doesnt exist anymore. 31 IOCTLs with zero validation on anything. arbitrary physmem R/W, port I/O, PCI config R/W, MSR read, interrupt hooking, keyboard injection. no auth gate, no hardware gate, loads on any system with sc.exe not on loldrivers. not on hvci blocklist. no CVE. vendor is dead so you cant even do responsible disclosure. theres nobody to email filed an issue @M_haggis

iOS 18-18.7.1 and iOS 26.0 - 26.0.1 Full Root Access Exploit github.com/rooootdev/lara

⚡️0-Day Alert: Google Chrome RCE + EoP in the wild • CVE-2026-3910: v8 Maglev JIT incorrect write barrier elimination for Smi representation in Phi edge cases => UaF or memory corruption Impact: remote ACE in renderer via JavaScript code. Same structural pattern invariant as seen in a recent WebKit jsc bug. • CVE-2026-3909: Skia glyph cache key collision to out-of-bounds write in GPU process Impact: at least a partial (full on some platforms) Sandbox Escape primitive. Potentially reachable remotely via renderer media formats. In the specific exploit it was likely pushed directly to IPC from a compromised renderer via CVE-2026-3910. Both bugs patched since Chrome 146.0.7680.80 for Windows/Mac and 146.0.7680.80 for Linux

My First CVE and my first contribute linux kernel naup.mygo.tw/2026/03/23/My-…

Windows 11 24h-2 Kernel Exploitation eneio64.sys LPE PoC Task traversal is one of my favorite techniques. I hope everyone like it as me :) Reach the blog at the link below -> lnkd.in/dD6gKV3E #Windows #Kernel #Exploit #win11 #24h2 #kernelexploit #windowskernel

Devirtualizing VMProtect and Themida nac-l.github.io/2025/01/25/lif… #infosec #reverseengineering

@deathorsufferin Also I didn't know conditional mov instruction, thanks for information.

@enessakircolak Thanks for post. I know the challenge doesnt require the shellcode to run on both Windows 10 and Windows 11 but the syscall numbers corresponding to the system in which it runs can be obtained without branching instructions (for example using CMOVcc)

X64 Syscall Shellcode via ASM I wrote it for ekoparty2025_challenge. So its also a writeUp for BinaryGecko Reach the blog at the link below -> enessakircolak.netlify.app/posts/2025/sys… #Shellcode #Assembly #Windows #binarygecko #exploit #reverseengineering #microsoft #x64

@berkant_dmrc Sorry, I won't do it again. It happens once 😅

@enessakircolak 👏👏👏 Waiting for Linux shared libraries👀 👀

@deathorsufferin Yeah they said this one is the hardest way. I also mentioned on the blog what I'm doing is like "ancient age" :)

Çok teşekkür ederim 🙏🏻🙏🏻

Windows Kernel Exploit I shared my first Windows Kernel Exploit experience in my last article. I included Dynamic Offset Resolution. Also you can find SMEP and KASLR bypass. Reach the blog at the link below -> lnkd.in/gXDEcE96 #Windows #WindowsKernelExploit

Windows Kernel ROP Gadget My latest blog, multi-functional instruction finder in kernel-land (ROP/JOP or any instruction). You can use it in the user-land with a little touch. Reach the blog at the link below -> lnkd.in/dB8GFpjd Alternative-> lnkd.in/dfncGuxj

NT_AUTHORITY/SYSTEM You think you own your system? Think again. We know who's really in charge: NT AUTHORITY. But don’t worry, today we’re going to tip the scales. Reach the Blog -> lnkd.in/d-DRSmnk Alternative -> lnkd.in/dfncGuxj #WindowsDriverDevelopment

Çok eğlenceli ve eğitici geçen dolu bir haftadan kalan bu hatıralar için hem @yildiz_cti ekibine hem @siber_vatan organizasyonuna hem de değerli @zayotem ekibime çok teşekkür ediyorum :)

Polymorphic malwares always make me wonder. Same file, different hashes. Here is my aspect, I'm waiting for feedbacks to improvement. Reach the blog at the link below -> lnkd.in/dCH-ubjD Alternative -> lnkd.in/dfncGuxj #malware #windows

⚠️ Yeni sezon raporları yayında! ZAYOTEM 5. Sezon Tersine Mühendislik stajyerleri takım arkadaşlarımız tarafından, popüler zararlı yazılım ailelerin güncel örnekleri başarılı bir şekilde analiz edildi. 👇👇