Leandro's Code Cave
Home
All posts
About
Tags
Entries tagged - "toctou"
The Sandbox Broker That Couldn't Be Confused - Forging an AppContainer Token to Reach bfs.sys and Failing to Path-Confuse a File Broker That Re-Runs the Access Check in the Caller's Own Context on Windows 11 24H2
Jul 8, 2026