A PoC/demo demonstrating code injection via COM (using the IRundown::DoCallback() mechanism) to execute a payload in the context of a selected process, including lsass.exe (or any other PID).
oxfemale
February 6, 2026
1 min read
34 reads A PoC/demo demonstrating code injection via COM (using the IRundown::DoCallback() mechanism) to execute a payload in the context of a selected process, including lsass.exe (or any other PID).
Sources PoC Here https://github.com/oxfemale/com_inject_cmd_lsass
Exploit Development50 An original English rewrite of Ghost Wolf Lab’s 2026-05-25 article on Protected Process Light (PPL) abuse. The piece maps Windows’ PPL trust…
Threat Intelligence53 An original English rewrite of Robin Dost's deep dive into UAC-0247 (now confirmed by CERT-UA as a continuation of UAC-0244): a multi-stage…
Privilege Escalation279 A comprehensive technical analysis of CVE-2026-57239, a privilege escalation vulnerability in Foxit PDF Reader that allows unprivileged users to escalate to NT…
