Debug29 Windows Kernel Debugging
The article explains how to set up Windows kernel debugging over a network using WinDBG and a host/target configuration. It covers enabling…
oxfemale·
Feb 23·
8 min
·29
// Escalation
16 postsDebug29 
ALPC625 Analysis of Improper Authorization in Windows Error Reporting CVE-2026-20817 (PoC)
Proof-of-Concept (PoC) for CVE-2026-20817, a local privilege escalation vulnerability in the Windows Error Reporting (WER) service. The vulnerability allows an authenticated low-privileged…
oxfemale·
Feb 18·
13 min
·625
Process Injection via Component Object Model (COM) IRundown::DoCallback() for run cmd.exe from lsass.exe or other pids
A PoC/demo demonstrating code injection via COM (using the IRundown::DoCallback() mechanism) to execute a payload in the context of a selected process, including lsass.exe (or any…
oxfemale·
Feb 6·
1 min
·33
Audio24 DLL Hijacking in Windows Audio: A New Escalation Technique
Original post by S1lky This article describes DLL hijacking in the context of the audiodg.exe process which may load vendor-supplied APO-related DLL…
oxfemale·
Jan 30·
17 min
·24