Dislocker on Łukasz Pastuszak - security noteshttps://lukaszpastuszak.dev/tags/dislocker/Recent content in Dislocker on Łukasz Pastuszak - security notesHugoen-usThu, 15 Oct 2026 00:00:00 +0000Odorihttps://lukaszpastuszak.dev/writeups/odori/Thu, 15 Oct 2026 00:00:00 +0000https://lukaszpastuszak.dev/writeups/odori/Anonymous SMB access leads to a BitLocker-encrypted .vmdk whose DPAPI credentials reveal svc_backup, then an SFTP ForceCommand bypass grants a shell and a world-writable __pycache__ allows hijacking a root cron job via a patched .pyc to gain root.