Bypassing ASLR on Windows 11

Hey everyone,

I've been analyzing some recent changes to Windows Kernel and found an interesting approach to bypassing ASLR using a novel information disclosure vulnerability.

Let me walk you through the method...

Great find @0xCyber.

I encountered something similar while testing on Windows 11 Build 22621. The key is to leverage the heap grooming technique before attempting the actual exploit.

I can confirm this works on bare metal as well. The offset changes slightly between builds but the methodology remains solid. Great work!