Resources

People often ask me "How did you learn how to hack?" The answer: by reading. This page is a collection of the blog posts and other articles that I have accumulated over the years of my journey. Enjoy!

Mircopatched a Zero Day in Task Scheduler - 90

0PatchPosted 6 Years Ago
  • The people at 0patch will create patches for zero day exploits then release them to the world. In the article, they explain the vulnerability, how they reverse engineered the exploit to find the bug and then how they fixed it.
  • These people are amazing and code great research :)
  • Essentially, the SchRpcSetSecurity function has an impersonation feature. This feature acts as the Local System user to make changes to files and does not validate the actual permissions of the current user.
  • All the fix took was 4 assembly instructions!