POC2021 – Pwning the Windows 10 Kernel with NTFS and WNF Slides

Alex Plaskett's POC 2021 talk "Pwning the Windows 10 Kernel with NTFS and WNF" analyzes CVE-2021-31956, a local privilege escalation 0day reportedly exploited in the wild. The presentation walks through assessing exploitability on modern Windows (including the Segment Heap), leveraging the Windows Notification Framework (WNF) to build exploit primitives, challenges for reliable kernel pool exploitation, and lessons to aid detection and response.