evanmcbroom.bsky.social
@SpecterOps
👤 Joined on 16 November 2024
Followers
Following
Total Posts
@evanmcbroom.bsky.socialClose your eyes and ✨imagine: From a low-integrity process (from LPAC even), you can inject your data anywhere you want: privileged tasks, PPL/protected processes, the OS kernel itself, and VTL1 trustlets. Now open your eyes. It is not hypothetical. It is the reality. Read it on page 33.
Show PostError you may randomly get anytime you delete stuff: błąd 0x80070050. Nevermind the shellful bin and Shellberus the dog (recycler shell32 dev). Error is due to rnd name generation for the bin: $R[A-Z0-9]{6}<.ext>. Deleting 2 files: 36⁻⁶ ≈ 2⁻³¹ fail chance. 🎈Birthday paradox: 50% 🎲 for 54933 files.
Show Post🔙🕛1582⚡ Set-Date 1601-10-08;if($?){$b=60*24*365*19;` $x={Add-Type -m "[DllImport(`"ntdll`")]public static extern int $f(int a,int$args b,int c,int[]d);"$f$f -pas};` $f='RtlAdjustPrivilege';(&$x)::$f(34,1,0,0);` $f='NtSetSystemInformation';(&$x [])::$f(93,(,$b+(,0*42)),172,0)} (that kills your app)
Show Post