CravateRouge

@itm4n Bien joué la partie reverse avec le filtre ApiMonitor, ça a pas été trop fastidieux de traduire les structures FVE pour ApiMonitor?

@itm4n That's a very cool patch analysis, the detective work is crazy on this one! Also seeing an analysis of another type of vulnerability than memory corruption is very refreshing 😃

@itm4n Hope you will!

@itm4n I tried to exploit it but I'm stuck at the last step, I don't see how it is possible to do code execution by putting a 1..\..\C:foo.dll in HKLM\SYSTEM\CurrentControlSet\Services\TPM\WMI

@itm4n I guess he has another trick under his sleeves that he doesn't want to reveal to the world 🥲

@albinowax@infosec.exchange Interesting experiment! Did you succeed to fit all your micro inspiration in one context so that your LLM could combine them to create hypothesis?

@tiraniddo@infosec.exchange @itm4n@infosec.exchange Waiting for a part 2 of your blog post with the full privesc :D