INFINITE NIGHTMARE

@filip_dragovic My sixth got burned

Second 0day burned in less then 6 months.

I did not expect it to be this difficult...

inspired by a true story

@NotNordgaren Do Microsoft

See?

@Armagedon247 We have computah now, Reze was retired, thank you for your service Reze

@MSNightmare2000 No more Reze beefing with Microsoft💔

Okay, I'm doing a bit of re-branding, I'm now this dude and got a new name and I will be using copilot to find bugs and exclusively address it as "Computer"

I would do anything for this exploit to work, please please let it be true it would be really funny pleaaase...

Real

@apstrusus84 @Evil_Mog I got MVR several times, nothing special about it, didn't even get my swag.

@Evil_Mog I nominated @ChaoticEclipse0 .

I am sad to announce that I am not a Microsoft MVP this year. I didn't try though to be fair, congratulations to this year's honorees

Code is up

@vxunderground I quadrupled the dosage instead of tuning it down, seems to work !

Lots of people asked me to be their Benzodiazepine test dummy and kind of document my taper and stuff. Many people seemed nervous trying to quit. Here is the current state. Unfortunately it is not good. > be me > on Benzodiazepines > 14 years > not good > decide to stop > cut by 25% > not too bad > people say be careful > can be hard > no big deal > cut another 25% > hehe 50% reduction > shrimple > day 5 arrives of 50% cut > feel weird > whatever > day 6 feel weirder > day 8 arrives > deep unfathomable depression > feel empty, unable to even malware Holy cannoli, Chat. This will pass, but you have GOT to be prepared when doing big tapers with Klonopin or Benzodiazepines. I know tons of people told me, but the first aggressive 25% cut wasn't bad. My brains GABA thingies are screaming at me and it feels like my soul is being crushed. It is a deep hollow emptiness and wave after wave of anxiety. Here is a silly picture depicting how I currently feel inside. Klonopin is not cool and it is not badass. It fucks you up

@infiltrator86 @UK_Daniel_Card Microsoft apparently, otherwise you're a criminal scum who should be put in jail

From a legal standpoint, who actually "owns" the information in a discovered 0day? The researcher? If so, why couldn't a researcher notify the manufacturer and give them the option to buy the information/0day. Who owns the 0day? @UK_Daniel_Card @ChaoticEclipse0

@Pepperstone_1 Just a fan.

@ChaoticEclipse0 Are you really the Nightmare Eclipse? Or just a fan page?

Also had some weird thoughts recently, obviously I'm quite familiar with how GDID function in windows. Hypothetically speaking, you can spoof that GDID if you somehow manage to know some else's GDID and end up incriminating them by uploading stuff that would land anyone in jail.

It's quite odd how it was used as evidence to incriminate someone...

Unfortunately this time I won't be publishing any code, this issue isn't interesting enough for me to invest time to make a good PoC. Reproducing this should relatively easy if you know how to write code.

I modified an SMB server I found and managed to achieve the effect I wanted, after visiting the custom SMB server, defender eats up all available space. The only problem here is you need to know exactly how much disk space is left in the machine to achieve a full disk exhaustion.

New blog about some recent findings in Windows Defender blog.projectnightcrawler.dev/posts/2026-07-… It seems to be leaking few bytes when attempting to open some files + visiting a malicious SMB (possibly webdav too) can cause Defender to completely exhaust your disk space.

Microsoft issued a security patch for RoguePlanet msrc.microsoft.com/update-guide/e…