Original text by Remco van der Meer
Motivation
Microsoft Remote Procedure Call (MS-RPC) is a protocol used within Windows operating systems to enable inter-process communication, both locally and across networks.
https://core-jmp.org/2026/05/automating-ms-rpc-vulnerability-research/
Motivation
Microsoft Remote Procedure Call (MS-RPC) is a protocol used within Windows operating systems to enable inter-process communication, both locally and across networks.
https://core-jmp.org/2026/05/automating-ms-rpc-vulnerability-research/
Automating MS-RPC vulnerability research
Automating MS-RPC research shows how NtObjectManager, dynamic RPC clients, fuzzing, canary tracing, ProcMon and Neo4j can map interfaces, test procedures, find crashes and uncover coercion-style Windows bugs.
core-jmp.org
May 17, 2026 at 4:25 PM
Original text by Remco van der Meer
Motivation
Microsoft Remote Procedure Call (MS-RPC) is a protocol used within Windows operating systems to enable inter-process communication, both locally and across networks.
https://core-jmp.org/2026/05/automating-ms-rpc-vulnerability-research/
Motivation
Microsoft Remote Procedure Call (MS-RPC) is a protocol used within Windows operating systems to enable inter-process communication, both locally and across networks.
https://core-jmp.org/2026/05/automating-ms-rpc-vulnerability-research/
Original text by Remco van der Meer
The article describes new improvements to the MS-RPC-Fuzzer for Windows RPC vulnerability research. #ALPC #ETW #MSRPC #MSRPCFuzzer #NDR #NtObjectManager #RPCFuzzing #Spo
https://core-jmp.org/2026/05/recursively-fuzzing-ms-rpc-structures-and-monitoring-using-etw/
The article describes new improvements to the MS-RPC-Fuzzer for Windows RPC vulnerability research. #ALPC #ETW #MSRPC #MSRPCFuzzer #NDR #NtObjectManager #RPCFuzzing #Spo
https://core-jmp.org/2026/05/recursively-fuzzing-ms-rpc-structures-and-monitoring-using-etw/
Recursively fuzzing MS-RPC structures and monitoring using ETW
The article updates MS-RPC-Fuzzer with recursive structure fuzzing, union support, ETW-based syscall monitoring, canary tracking, crash replay, and a Spooler case where SYSTEM loads a DLL.
core-jmp.org
May 5, 2026 at 11:06 AM
Original text by Remco van der Meer
The article describes new improvements to the MS-RPC-Fuzzer for Windows RPC vulnerability research. #ALPC #ETW #MSRPC #MSRPCFuzzer #NDR #NtObjectManager #RPCFuzzing #Spo
https://core-jmp.org/2026/05/recursively-fuzzing-ms-rpc-structures-and-monitoring-using-etw/
The article describes new improvements to the MS-RPC-Fuzzer for Windows RPC vulnerability research. #ALPC #ETW #MSRPC #MSRPCFuzzer #NDR #NtObjectManager #RPCFuzzing #Spo
https://core-jmp.org/2026/05/recursively-fuzzing-ms-rpc-structures-and-monitoring-using-etw/
RPC tutorial
clearbluejar.github.io/posts/from-n...
clearbluejar.github.io/posts/from-n...
From NtObjectManager to PetitPotam
Windows RPC enumeration, discovery, and auditing via NtObjectManager. We will audit the vulnerable RPC interfaces that lead to PetitPotam, discover how they have changed over the past year, and overco...
clearbluejar.github.io
August 21, 2025 at 11:22 PM
RPC tutorial
clearbluejar.github.io/posts/from-n...
clearbluejar.github.io/posts/from-n...