Windows | writeups.xyz

Title	Vulnerabilities	Programs	Authors
I hacked a card printer software (CVE-2024-34329)	Local Privilege Escalation DLL Hijacking Windows	Entrust	P0pcycle
Dumping LSA secrets: a story about task decorrelation	EDR Bypass Windows Internal Pentest Red Team	Undisclosed	Aurélien Chalot (@Defte_)
Cache Me If You Can: Local Privilege Escalation in Zscaler Client Connector (CVE-2023-41973)	Path Traversal Authentication Bypass Arbitrary File Delete DLL Hijacking Local Privilege Escalation Windows	Zscaler	Eugene Lim (@Spaceraccoonsec) Winston Ho
BatBadBut: You can't securely execute commands on Windows	OS Command Injection Windows	PHP Node.js Rust Haskell Yt-Dlp	RyotaK (@Ryotkak)
A Practical Guide to PrintNightmare in 2024	Local Privilege Escalation Windows	Undisclosed	Clément Labro (@Itm4n)
CVE-2024-20656 – Local Privilege Escalation in the VSStandardCollectorService150 Service	Local Privilege Escalation Windows	Microsoft (VS Code)	Filip Dragovic (@Filip_dragovic)
“Please do not make it public” - Vulnerabilities in Sogou Keyboard encryption expose keypresses to network eavesdropping	Cryptographic Issues Padding Oracle Attack Windows Android IOS	Tencent	Jeffrey Knockel Zoë Reichert Mona Wang
Lenovo Update Your Privileges	Local Privilege Escalation DLL Hijacking Windows	Lenovo	Raphael Rosenast
Poch, Poch, is this thing on? Bypass AMSI with Divide & Conquer	AMSI Bypass Local Privilege Escalation Windows	Microsoft (Windows Defender)	PfiatDe (@Pfiatde)
Performance, Diagnostics, and WMI	Lateral Movement Windows	Undisclosed	Steven Flores (@0xthirteen)
Process Mockingjay: Echoing RWX In Userland To Achieve Code Execution	DLL Injection EDR Bypass Process Injection Windows	Undisclosed	Security Joes (@SecurityJoes)
Pulling SYSTEM out of Windows GINA	Authentication Bypass Windows Local Privilege Escalation	Zoho (ManageEngine ADSelfService Plus)	Pedro Ribeiro (@Pedrib1337) João Bigotte Ashley King
LocalPotato - When Swapping The Context Leads You To SYSTEM	Windows NTLM Local Privilege Escalation	Microsoft	Andrea Pierini (@Decoder_it)
Post-Exploitation: Abusing the KeePass Plugin Cache	Local Privilege Escalation Windows	KeePass	Kevin Minacori
Breaking Docker Named Pipes SYSTEMatically: Docker Desktop Privilege Escalation – Part 1	Local Privilege Escalation Windows Thick Client	Docker	Eviatar Gerzi
Can't Wait to Shut You Down — Remote DoS Using Wininit.exe	DoS MS-RPC Windows	Microsoft	Stiv Kupchik (@Kupsul)
Exploiting a Critical Spoofing Vulnerability in Windows CryptoAPI	Windows Cryptographic Issues	Microsoft	Tomer Peled (@Tomerpeled92) Yoni Rozenshein
Activation Context Cache Poisoning: Exploiting CSRSS For Privilege Escalation	Local Privilege Escalation Windows	Microsoft	Simon Zuckerbraun
Dissecting and Exploiting TCP/IP RCE Vulnerability “EvilESP”	Kernel Hacking Windows RCE Memory Corruption Buffer Overflow	Microsoft (Windows)	Valentina Palmiotti (@Chompie1337)
You’ve Crossed the Line — Disturbing a Host’s Rest	Windows MS-RPC DoS	Microsoft	Ben Barnea (@Nachoskrnl)
Public Report – VPN by Google One Security Assessment	Android IOS DoS Windows MacOS Local Privilege Escalation	Google	Daniel Romero (@Daniel_rome) Laura Garcia Mario Rivas Rafael Alfaro March Shawn Fitzgerald
SysmonEoP	Local Privilege Escalation Windows	Microsoft	Filip Dragovic (@Filip_dragovic)
Control Your Types Or Get Pwned: Remote Code Execution In Exchange Powershell Backend	RCE Windows	Checkmk	Piotr Bazydło (@Chudypb)
Relaying to AD Certificate Services over RPC	Active Directory ADCS Windows	Undisclosed	Sylvain Heiniger (@Sploutchy)
Every Signature is Broken: On the Insecurity of Microsoft Office’s OOXML Signatures	Signature Bypass Signature Forgery Cryptographic Issues Windows	Microsoft	Simon Rohlmann Vladislav Mladenov Christian Mainka Daniel Hirschberger Jörg Schwenk

Page 1 of 2