HACKINGISCOOL

Home
About

Anatomy of Access: Windows Device Objects from a Security Perspective

Julian Horoszkiewicz

Mar 31, 2026 • 1 min read

Reaching non-default conditional blocks during grey and blackbox webapp testing

Intro I want to touch on the very common problem of incomplete coverage of code paths inherent to blackbox and greybox security testing of web apps. I have never been a fan of this approach to security testing, mostly due to the very limited target visibility leading to a disproportionately

Apr 9, 2025 10 min read

Using EDR telemetry for offensive research - part 2 - service SDDLs

This article continues on the subject of using EDR telemetry to search for potential security vulnerabilities, the basics of which I have covered in the first part: https://hackingiscool.pl/using-edr-telemetry-for-offensive-research/. In that part I mentioned that having base events carrying information on file (or any other securable object) permissions

Mar 31, 2025 10 min read

Breaking out from stripped tokens with duplication

This is just a short complementary follow-up after the previous, much longer article (https://hackingiscool.pl/breaking-out-from-stripped-tokens-using-process-injection/) about moving code execution to a process with a more privileged token (in terms of token privileges and/or group memberships). In addition to the main method (process injection) and the second method

Mar 18, 2025 3 min read

HACKINGISCOOL © 2026

Powered by Ghost

No one really cares about cookies and neither do I