<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Nightmare Eclipse on HackingPassion.com : root@HackingPassion.com-[~]</title><link>https://hackingpassion.com/tags/nightmare-eclipse/</link><description>Recent content in Nightmare Eclipse on HackingPassion.com : root@HackingPassion.com-[~]</description><generator>Hugo</generator><language>en</language><lastBuildDate>Fri, 12 Jun 2026 10:51:38 +0200</lastBuildDate><atom:link href="https://hackingpassion.com/tags/nightmare-eclipse/index.xml" rel="self" type="application/rss+xml"/><item><title>GreatXML Turns Windows Defender's Offline Scan Into a BitLocker Bypass</title><link>https://hackingpassion.com/greatxml-bitlocker-bypass/</link><pubDate>Fri, 12 Jun 2026 10:51:38 +0200</pubDate><guid>https://hackingpassion.com/greatxml-bitlocker-bypass/</guid><description>&lt;p>Nightmare-Eclipse is back again, this time with a BitLocker bypass called &lt;strong>GreatXML&lt;/strong> that runs straight through Microsoft&amp;rsquo;s own antivirus. On a Windows machine that has run a Defender offline scan even once, the recovery mode hands over a command shell with full access to the encrypted drive, while BitLocker still reports the disk as locked and protected. Microsoft has no patch for it. He published &lt;code>GreatXML&lt;/code> the day after &lt;code>RoguePlanet&lt;/code>, right after the June Patch Tuesday where Microsoft had just fixed his first BitLocker bypass, the largest Patch Tuesday yet at close to 200 fixes in a single day.&lt;/p></description></item><item><title>RoguePlanet Windows Defender Zero Day Hands Any User Full SYSTEM Control</title><link>https://hackingpassion.com/rogueplanet-windows-defender-zero-day/</link><pubDate>Wed, 10 Jun 2026 12:01:36 +0200</pubDate><guid>https://hackingpassion.com/rogueplanet-windows-defender-zero-day/</guid><description>&lt;p>Nightmare-Eclipse is back, with a new exploit called &lt;strong>RoguePlanet&lt;/strong>. Windows 10 and 11 have a new zero-day that lets a user with no rights take complete control of a fully updated machine, and Microsoft has no patch for it. He dropped it on Patch Tuesday, June 9th, a few hours after Microsoft shipped its largest Patch Tuesday yet, nearly 200 fixes in a single day.&lt;/p>
&lt;p>Some of those fixes closed his own earlier bugs. So while Microsoft was busy sealing the gaps he had already found, he opened a new one in public. For weeks he had been vague about whether anything was coming in June, switching between yes and no, and then he just did it.&lt;/p></description></item></channel></rss>