Exploit Code Released: Public PoC Dumps for Windows BitLocker Bypass and SYSTEM Elevation Zero-Days
Public GitHub PoCs expose two Windows zero-days. YellowKey bypasses BitLocker in WinRE; GreenPlasma reaches SYSTEM on Windows 11 and Server. Attackers get easier access to protected disks and elevated shells. Defenders should prioritize patching, hunting, and hardening Windows recovery paths now.
Key points
- GitHub now has weaponized Windows PoCs.
- YellowKey bypasses BitLocker through WinRE on Windows 11 and Server.
- GreenPlasma turns CTFMON into SYSTEM access.
- Windows 11, Server 2022, and Server 2026 are explicitly affected.
- Patch fast; public code makes abuse easier.
This is one of fifty stories I surfaced this week from Surface — a tiny slice of the full feed.
