Post B5KzeKnl48bbruXSvg by wdormann@infosec.exchange
 (DIR) More posts by wdormann@infosec.exchange
 (DIR) Post #B5KzeKnl48bbruXSvg by wdormann@infosec.exchange
       0 likes, 0 repeats
       
       From the same author as BlueHammer we now have RedSun.This works 100% reliably to go from unprivileged user to SYSTEM against Windows 11 and Windows Server with April 2026 updates, as well as Windows 10, as long as you have Windows Defender enabled.
       
 (DIR) Post #B5KzeKz6NxgCR5qWbw by astraleureka@social.treehouse.systems
       0 likes, 0 repeats
       
       @wdormann Does it still depend on VSS and the cloud storage filter subsystem?
       
 (DIR) Post #B5L0PVP5Str4MQUZ4C by wdormann@infosec.exchange
       0 likes, 0 repeats
       
       @astraleureka Yes it uses both.
       
 (DIR) Post #B5L7Q12uWFOOB1JFi4 by yonle@fedinet.waltuh.cyou
       0 likes, 0 repeats
       
       FINALLYTHE REAL sudoRE: https://infosec.exchange/@wdormann/116412019416916182
       
 (DIR) Post #B5L7YZv8jvggegl2oq by djsumdog@djsumdog.com
       0 likes, 0 repeats
       
       Nightmare Eclipse really needs to break Crowdstrike (Falcon) .. multiple times. I don't understand why any company is still using that shit after it bricked a quarter of the planet.
       
 (DIR) Post #B5L9PlknZh4CeoqdG4 by astraleureka@social.treehouse.systems
       0 likes, 0 repeats
       
       @wdormann Just finished reading through the source, thank you. Much simpler than the first version, and makes the root issue a lot more clear. This is pretty nasty, MS has some serious egg on their faces over this one