corpus.blog
56,966 blogs · [ { "id": "01a0d88f-35bd-7068-8cb2-57fe8a43f849", "title": "A Tale of Several Hijacks and What It Taught Me About Runtime-Driven Testing", "url": "https://hackingiscool.pl/a-tale-of-several-hijacks-and-what-it-taught-me-about-runtime-driven-testing/", "published_at": "2026-09-23T05:21:03+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f40d2f42b", "title": "Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspective", "url": "https://hackingiscool.pl/making-vulnerable-drivers-exploitable-without-hardware-the-byovd-perspective/", "published_at": "2026-04-10T09:02:43+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f416d55df", "title": "Anatomy of Access: Windows Device Objects from a Security Perspective", "url": "https://hackingiscool.pl/anatomy-of-access-windows-device-objects-from-a-security-perspective/", "published_at": "2026-03-31T16:28:18+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f4251690a", "title": "Reaching non-default conditional blocks during grey and blackbox webapp testing", "url": "https://hackingiscool.pl/reaching-non-default-conditional-blocks-during-grey-and-blackbox-webapp-testing/", "published_at": "2025-04-09T15:56:27+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f42a6ede9", "title": "Using EDR telemetry for offensive research - part 2 - service SDDLs", "url": "https://hackingiscool.pl/using-edr-telemetry-for-offensive-research-part-2-service-sddls/", "published_at": "2025-03-31T14:50:27+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f435325c2", "title": "Breaking out from stripped tokens with duplication", "url": "https://hackingiscool.pl/breaking-out-from-stripped-tokens-with-duplication/", "published_at": "2025-03-18T20:11:06+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f4378dfdf", "title": "Next hop is nowhere - silencing EDRs with null routing", "url": "https://hackingiscool.pl/next-hop-is-nowhere-silencing-edrs-with-null-routing/", "published_at": "2025-02-04T15:51:08+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f43b89edc", "title": "Flying under the radar with split processing", "url": "https://hackingiscool.pl/flying-under-the-radar-with-split-processing/", "published_at": "2024-12-09T18:36:33+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f444d6d57", "title": "Slipping through the cracks - the imperfections and nuances of CVE", "url": "https://hackingiscool.pl/slipping-through-the-cracks-the-imperfections-and-nuances-of-cve/", "published_at": "2024-10-24T14:13:35+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f44e1b8d4", "title": "Breaking out from stripped tokens using process injection", "url": "https://hackingiscool.pl/breaking-out-from-stripped-tokens-using-process-injection/", "published_at": "2024-10-13T10:06:09+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f455205a1", "title": "Abusing .NET app.config for initial access, persistence, privilege escalation and denial of service", "url": "https://hackingiscool.pl/abusing-net-app-config-for-initial-access-persistence-privilege-escalation-and-denial-of-service/", "published_at": "2024-10-08T19:25:48+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f46507c96", "title": "ZScaler Client Connect 3.7.2.18 LPE POC", "url": "https://hackingiscool.pl/zscaler-client-connect/", "published_at": "2024-07-20T11:47:21+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f46bf61f6", "title": "CVE-2024-35315-POC", "url": "https://hackingiscool.pl/cve-2024-35315-poc/", "published_at": "2024-06-03T14:32:42+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f473e28f7", "title": "Intel PowerGadget 3.6 Local Privilege Escalation", "url": "https://hackingiscool.pl/intel-powergadget-3-6-local-privilege-escalation/", "published_at": "2024-03-27T05:09:32+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f47f0adc0", "title": "CVE-2023-7016-POC", "url": "https://hackingiscool.pl/cve-2023-7016-poc/", "published_at": "2024-02-28T04:51:16+00:00" }, { "id": "01a08780-91a5-726b-b087-c80f4833dde2", "title": "CVE-2024-0197-POC", "url": "https://hackingiscool.pl/proof-of-concept-for-local-privilege-escalation-in-thales-sentinel-hasp-ldk/", "published_at": "2024-02-28T04:50:15+00:00" } ] posts Claim your blog
Back to hackingiscool.pl
Blog · corpus.blog/blogs/hackingiscool.pl/posts

hackingiscool.pl

hackingiscool.pl

2026

A Tale of Several Hijacks and What It Taught Me About Runtime-Driven Testingoriginal ↗
23 Sept 2026
Making Vulnerable Drivers Exploitable Without Hardware - The BYOVD Perspectiveoriginal ↗
10 Apr 2026
Anatomy of Access: Windows Device Objects from a Security Perspectiveoriginal ↗
31 Mar 2026

2025

Reaching non-default conditional blocks during grey and blackbox webapp testingoriginal ↗
9 Apr 2025
Using EDR telemetry for offensive research - part 2 - service SDDLsoriginal ↗
31 Mar 2025
Breaking out from stripped tokens with duplicationoriginal ↗
18 Mar 2025
Next hop is nowhere - silencing EDRs with null routingoriginal ↗
4 Feb 2025

2024

Flying under the radar with split processingoriginal ↗
9 Dec 2024
Slipping through the cracks - the imperfections and nuances of CVEoriginal ↗
24 Oct 2024
Breaking out from stripped tokens using process injectionoriginal ↗
13 Oct 2024
Abusing .NET app.config for initial access, persistence, privilege escalation and denial of serviceoriginal ↗
8 Oct 2024
ZScaler Client Connect 3.7.2.18 LPE POCoriginal ↗
20 Jul 2024
CVE-2024-35315-POCoriginal ↗
3 Jun 2024
Intel PowerGadget 3.6 Local Privilege Escalationoriginal ↗
27 Mar 2024
CVE-2023-7016-POCoriginal ↗
28 Feb 2024
CVE-2024-0197-POCoriginal ↗
28 Feb 2024