Understanding safeguards/guardrails for cybersecurity work to not get blocked
Hitting AI guardrails on frontier models is annoying, therefore this blog explains them and describes how to work around them.
Remco van der Meer
Recursively fuzzing MS-RPC structures and monitoring using ETW
Updates to the MS-RPC fuzzer includes fuzzing over complex structures and logging using ETW and we found a way to escalate to nt authority\system!
Remotely crashing the Spooler service
Showcasing a vulnerability in Windows that causes the Spooler service to crash remotely.
Deleting the BCD through COM as low privileged user (external)
CVE-2025-59253: Demonstrating a vulnerability in Windows that leads to a low privileged user being able to delete the boot configuration data (BCD) through COM.
Automating COM/DCOM vulnerability research
Diving into COM/DCOM and how to automate vulnerability research using a fuzzing approach.
Exploit development for vulnerabilities in Windows over MS-RPC
Showcasing some different ways to craft exploits for vulnerabilities over MS-RPC
Revisiting automating MS-RPC vulnerability research and releasing the tool
Partially solving the problem for procedures that need valid complex parameter types to fuzz, and open sourcing the tool
Automating MS-RPC vulnerability research
Diving into the MS-RPC protocol and how to automate vulnerability research using a fuzzing approach.
Pressing the LSM kill switch (external)
CVE-2025-26651: Revealing a vulnerability in Windows Local Session Manager (LSM), that causes it to crash
Walking the dog: Fun with Kerberos and Pass The Certifcate
Having fun with Pass the Certificate and Kerberos errors and how to work around them