Title: GreatXML a bitlocker bypass that seems to only work if you ever had Defender Offline Scan
Date: 2026-06-10T18:19:11.500-07:00
Source: blogger
Origin: https://deadeclipse666.blogspot.com/2026/06/greatxml-bitlocker-that-seems-to-only.html
Mirror: feed
Upstream live: yes

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

This was an accidental discovery, it took a total of 4 hours to find this.

If you ever attempted to use Windows Defender Offline Scan, you're automatically vulnerable to a bitlocker bypass. I'm unsure if you can still trigger the bug without ever using the offline scan feature, because you can definitely

Details can be found here,

https://git.projectnightcrawler.dev/NightmareEclipse/GreatXML

https://github.com/MSNightmare/GreatXML

https://git.churchofmalware.org/Nightmare_Eclipse/GreatXML

I think you can definitely make this work in more scenarios, just not interested enough to look at it for now.
-----BEGIN PGP SIGNATURE-----

iHUEARYKAB0WIQRJTvAf/AWVhAKEeb7FFoRCS0/SbAUCaioMsQAKCRDFFoRCS0/S
bLn8AQDqoC5Tnb8PvwWnrD72Zr7fCEAd03aAylzZ4FQjxxTYKgD+Im4JFnXCaJI3
915H+L156rTRG+ExvkIU5M8LK8lDLAY=
=jQRA
-----END PGP SIGNATURE-----
