Jake Bolam (@xixasec) profile picture

Jake Bolam

@xixasec

Red Teamer @ AmberWolf

 United Kingdom
github.com/0day
Joined March 2019
  • Tweets9
  • Following132
  • Followers190
I wrote a blog post about exploiting Logi Options+ for SYSTEM shells. blog.amberwolf.com/blog/2026…

A Peripheral Path to SYSTEM - Exploiting Logi Options+ for SYSTEM Shells

Chained flaws in the Logitech Options Plus updater give any local user SYSTEM code execution, with no admin rights or user interaction. CVE-2026-12518.

blog.amberwolf.com
1
21
1
59
4,179
Delinea protocol handler RCE number 3. blog.amberwolf.com/blog/2026…

Delinea Protocol Handler - Return of the MSI: RCE via Custom Launcher

AmberWolf Security Research Blog

blog.amberwolf.com
1
11
1
19
4,296
A .NET app will probably hono(u)r the Windows proxy settings (a.k.a. WinINET or IE proxy settings). But that adds a lot of noise to Burp's history. You might be able to proxy just its traffic with the config file. For app.exe, create app.exe.config (if not there) and add:
Image of an xml .NET config file to proxy an app. The contents are <configuration> <system.net> <defaultProxy> <proxy proxyaddress="http://127.0.0.1:8080" bypassonlocal="false" /> </defaultProxy> </system.net> </configuration>

ALT Image of an xml .NET config file to proxy an app. The contents are <configuration> <system.net> <defaultProxy> <proxy proxyaddress="http://127.0.0.1:8080" bypassonlocal="false" /> </defaultProxy> </system.net> </configuration>

2
8
48
Load more