Tyranid's Lair
Sunday, 18 November 2018
Finding Windows RPC Client Implementations Through Brute Force
›
Recently, @SandboxEscaper wrote a detailed blog post ( link seems she's locked down the blog, here's a link to an archive) about ...
Tuesday, 9 October 2018
Farewell to the Token Stealing UAC Bypass
›
With the release of Windows 10 RS5 the generic UAC bypass I documented in "Reading Your Way Around UAC" (parts 1 , 2 and 3 ) has ...
Sunday, 9 September 2018
Finding Interactive User COM Objects using PowerShell
›
Easily one of the most interesting blogs on Windows behaviour is Raymond Chen's The Old New Thing . I noticed he'd recently posted ...
Sunday, 22 July 2018
UWP Localhost Network Isolation and Edge
›
This blog post describes an interesting “feature” added to Windows to support Edge accessing the loopback network interface. For referenc...
Monday, 25 June 2018
Disabling AMSI in JScript with One Simple Trick
›
This blog contains a very quick and dirty way to disable AMSI in the context of Windows Scripting Host which doesn't require admin privi...
‹
›
Home
View web version