https://incendium.rocks/Remco van der MeerSecurity blog of Remco van der Meer 2026-08-13T21:40:55+02:00 Remco van der Meer https://incendium.rocks/ Jekyll © 2026 Remco van der Meer /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Understanding safeguards/guardrails for cybersecurity work to not get blocked2026-08-13T15:31:14+02:00 2026-08-13T21:40:19+02:00 https://incendium.rocks/posts/bypassing-guardrails-for-cybersecurity-work/ remco Hitting AI guardrails on frontier models is annoying, therefore this blog explains them and describes how to work around them. Recursively fuzzing MS-RPC structures and monitoring using ETW2026-05-04T05:33:00+02:00 2026-05-04T05:33:00+02:00 https://incendium.rocks/posts/Fuzzing-MS-RPC-structures-and-monitoring/ remco Updates to the MS-RPC fuzzer includes fuzzing over complex structures and logging using ETW and we found a way to escalate to nt authority\system! Remotely crashing the Spooler service2025-11-19T04:33:00+01:00 2025-11-19T20:03:38+01:00 https://incendium.rocks/posts/Remotely-crashing-spooler/ remco Showcasing a vulnerability in Windows that causes the Spooler service to crash remotely. Deleting the BCD through COM as low privileged user (external)2025-11-15T04:33:00+01:00 2025-11-27T21:26:26+01:00 https://incendium.rocks/posts/CVE-2025-59253/ remco CVE-2025-59253: Demonstrating a vulnerability in Windows that leads to a low privileged user being able to delete the boot configuration data (BCD) through COM. Automating COM/DCOM vulnerability research2025-10-30T04:33:00+01:00 2025-10-30T04:33:00+01:00 https://incendium.rocks/posts/Automating-COM-Vulnerability-Research/ remco Diving into COM/DCOM and how to automate vulnerability research using a fuzzing approach.