--- title: "Angry Hacker Drops Exploits on Windows (bitlocker backdoor?)" url: https://daily.dev/posts/angry-hacker-drops-exploits-on-windows-bitlocker-backdoor--ssxc9rmqn source_url: https://www.youtube.com/watch?v=H-SgQP3Hif0 type: video:youtube source: "Low Level Learning" published: 2026-05-27T14:38:45.185Z updated: 2026-05-27T14:39:49.352Z tags: ["security", "zero-day"] reading_time: 12 upvotes: 2 comments: 1 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Angry Hacker Drops Exploits on Windows (bitlocker backdoor?) **[Low Level Learning](https://daily.dev/sources/lowlevellearning)** · 12 min read · 2 upvotes · 1 comments ## Summary Security researcher Nightmare Eclipse publicly dropped multiple zero-day exploits for Microsoft products after disputes with Microsoft's Security Response Center bug bounty program, leading to bans from both GitHub and GitLab. The main focus is 'Yellow Key', an exploit targeting the Windows 11 recovery environment that bypasses BitLocker encryption. It works by placing malicious NTFS transactional file system (FSTX) data on a USB stick, which causes the recovery environment to replay transactions that delete a key INI file, dropping the user into a command shell with access to the decrypted BitLocker partition. The vulnerability exists because Windows 11's recovery environment auto-runs FSTX transactions (unlike Windows 10). Mitigations include removing the BootExecute registry key for FSTX or enabling TPM PIN mode, though the researcher claims a separate vulnerability may bypass even TPM+PIN configurations. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: --- Tags: [#security](https://daily.dev/tags/security), [#zero-day](https://daily.dev/tags/zero-day) [View this post on daily.dev](https://daily.dev/posts/angry-hacker-drops-exploits-on-windows-bitlocker-backdoor--ssxc9rmqn)