https://incendium.rocks/Remco van der MeerSecurity blog of Remco van der Meer 2025-12-28T20:51:00+01:00 Remco van der Meer https://incendium.rocks/ Jekyll © 2025 Remco van der Meer /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Remotely crashing the Spooler service2025-11-19T04:33:00+01:00 2025-11-19T20:03:38+01:00 https://incendium.rocks/posts/Remotely-crashing-spooler/ remco Showcasing a vulnerability in Windows that causes the Spooler service to crash remotely. Deleting the BCD through COM as low privileged user (external)2025-11-15T04:33:00+01:00 2025-11-27T21:26:26+01:00 https://incendium.rocks/posts/CVE-2025-59253/ remco CVE-2025-59253: Demonstrating a vulnerability in Windows that leads to a low privileged user being able to delete the boot configuration data (BCD) through COM. Automating COM/DCOM vulnerability research2025-10-30T04:33:00+01:00 2025-10-30T04:33:00+01:00 https://incendium.rocks/posts/Automating-COM-Vulnerability-Research/ remco Diving into COM/DCOM and how to automate vulnerability research using a fuzzing approach. Exploit development for vulnerabilities in Windows over MS-RPC2025-07-31T05:33:00+02:00 2025-07-31T05:33:00+02:00 https://incendium.rocks/posts/Exploit-Development-For-MSRPC/ remco Showcasing some different ways to craft exploits for vulnerabilities over MS-RPC Revisiting automating MS-RPC vulnerability research and releasing the tool2025-07-14T05:33:00+02:00 2025-07-14T05:33:00+02:00 https://incendium.rocks/posts/Revisiting-MS-RPC-Vulnerability-Research-automation/ remco Partially solving the problem for procedures that need valid complex parameter types to fuzz, and open sourcing the tool