sam-b/windows_kernel_address_leaks

This repository is a collection of standalone Windows user-mode demonstrations for disclosing kernel-related addresses and pointers, rather than one integrated application. The principal workflow is to run a technique-specific executable, obtain information through a Windows interface or shared user-mode structures, and print the resulting addresses; the triage-dump example instead writes a dump file. README-listed techniques are retained as separate branches. Several implementations are represented from the README and tree because their source was not excerpted, so their internal calls are not inferred.