/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 googleprojectzero.blogspot.com
Project Zero: Windows Exploitation Tricks: Exploiting Arbitrary File Writes for Local Elevation of Privilege
| | cihansol.com
Windows DLL Proxying/Hijacking - Dev Blog
4.1 parsecs away

Travel
| |
| | blog.0patch.com
0patch Blog: Micropatches Released For Windows Task Scheduler Elevation of Privilege (CVE-2023-21541)
4.6 parsecs away

Travel
| | January 2023 Windows Updates brought a fix for CVE-2023-21541 , a local privilege elevation in Task Scheduler. The vulnerability was repo...
| | neodyme.io
The Key to COMpromise - Abusing a TOCTOU race to gain SYSTEM, Part 2 - Neodyme
3.0 parsecs away

Travel
| | In this series of blog posts, we cover how we could exploit five reputable security products to gain SYSTEM privileges with COM hijacking. If you've never heard of this, no worries. We introduce all relevant background information, describe our approach to reverse engineering the products' internals, and explain how we finally exploited the vulnerabilities. We hope to shed some light on this undervalued attack surface.
| | blog.0patch.com
0patch Blog: Micropatching the "PrinterBug/SpoolSample" - Another Forced Authentication Issue in Windows
25.0 parsecs away

Travel
| by Mitja Kolsek, the 0patch Team Forced authentication issues (including NTLM relaying and Kerberos relaying) are a silent elephant in the...