Bypassing KPTI Using the Speculative Behavior of the SWAPGS Instruction

The course examines a speculative-execution side-channel attack that exploits the SWAPGS instruction to leak Windows kernel memory despite KPTI. It covers cache-timing fundamentals, x86 segmentation and GS-base behavior, exploitation techniques, and software mitigations.