The Seclogon Shortcut — Spawning SYSTEM Processes via CreateProcessWithTokenWAug 16, 2026·13 min read·20
Born With a Stolen Soul — Spawning Processes With Swapped Identities via NtSetInformationProcessAug 8, 2026·17 min read·71
The Complete Token Manipulation Playbook — Every Technique, One Truth About Parent PIDsFour remaining techniques, a debunked myth about SecLogon and svchost.exe, and the definitive comparison of every way to abuse Windows Access Tokens. Previously — Two Techniques Down In Part 1, we coAug 23, 2026·16 min read·116
Loader Lockwhat is loader lock ? Loader Lock is a special internal lock , windows holds while loading or unloading DLLs So Windows restricts these operations inside DllMain to avoid deadlocks or hangs. So DLL SiJul 21, 2026·1 min read·23
Windows Exception HandlingAgenda : what is exception ? what causes an exception ? what are the type of exception handler exist ? who sees it first ? What windows does by default ? when you need to register handlers ? What is windows exception (at OS level) ? An exception is ...Dec 22, 2025·4 min read·55
