Shadow SSDT Hijacking: Achieving Kernel Code Execution via Read-Write Primitives

The article shows how Shadow SSDT hijacking can turn kernel read/write primitives into transient kernel code execution by redirecting a GUI syscall…