41554 blogs · [ { "id": "01a08c63-3a3c-7371-bd50-29e4b2334c9a", "title": "Unpacking the AAD Broker LocalState Cache", "url": "https://winternl.com/aad-broker-cache/", "published_at": "2025-09-30T19:42:17+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b2d2615c", "title": "Full Fat Shellcode", "url": "https://winternl.com/full-fat-shellcode/", "published_at": "2025-04-10T16:34:03+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b2ef15a8", "title": "Loader Lock Ownership Semantics", "url": "https://winternl.com/loader-lock-ownership-semantics/", "published_at": "2024-11-23T20:12:59+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b3155db5", "title": "Fixing a bug in donut", "url": "https://winternl.com/fixing-a-bug-in-donut/", "published_at": "2024-10-09T15:08:24+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b31cd5af", "title": "Why is there a debug directory in my release build?", "url": "https://winternl.com/why-is-there-a-debug-directory-in-my-release-build/", "published_at": "2024-09-29T19:40:35+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b3c2b8d3", "title": "CVE-2022-43997 – Local Privilege Escalation in Aternity Agent", "url": "https://winternl.com/cve-2022-43997/", "published_at": "2023-01-23T17:16:01+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b4b32688", "title": "Dealing with Failure: Failure Escalation Policy in Unmanaged CLR Hosts", "url": "https://winternl.com/dealing-with-failure/", "published_at": "2022-05-10T23:51:00+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b509bcd9", "title": "Detecting Manual Syscalls from User Mode", "url": "https://winternl.com/detecting-manual-syscalls-from-user-mode/", "published_at": "2021-02-10T19:17:02+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b5dec339", "title": "Designing Emulation Resistant Control Flow", "url": "https://winternl.com/designing-emulation-resistant-control-flow/", "published_at": "2020-12-17T20:45:42+00:00" }, { "id": "01a08c63-3a3c-7371-bd50-29e4b65f51ce", "title": "MemFuck: Bypassing User-Mode Hooks", "url": "https://winternl.com/memfuck/", "published_at": "2020-09-08T00:42:16+00:00" } ] posts Claim your blog

Blog · corpus.blog/blogs/winternl.com/posts