Trendshift can no longer sync data for this repository from GitHub

Nightmare-Eclipse/GreenPlasma

GreenPlasma Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability

Visit GitHub

653

198

1 contributors

MIT License

FeaturedAdvertise to 180K+ monthly visitors

Bifrost

Fastest Enterprise AI Gateway for Routing, Governing, and Securing all your AI Traffic

Momentum

How fast Nightmare-Eclipse/GreenPlasma is gaining stars, and where it lands on Trendshift and GitHub Trending

Activity and trending

Stars, forks and merged pull requests each day or month, lined up with the repository's rank on Trendshift Trending

May 2026 – Nov 2026

Stars +653 in 7 months

653

Forks +198 in 7 months

198

Merged PRs 0 in 7 months

Trendshift Trendingthe best rank each month, on any day it made the top 25

Not in the Trendshift top 25 in this period

May 2026Jun 2026Jul 2026Aug 2026Sep 2026Oct 2026Nov 2026

Stars, forks, merged pull requests and best Trendshift Trending rank, by month
Month	Stars gained	Forks gained
May 2026	+653	+198
June 2026	+0	+0
July 2026	+0	+0
August 2026	+0	+0
September 2026	+0	+0
October 2026	+0	+0
November 2026	+0	+0
Total	+653	+198

#1 on the list
Best rank that month
Not trending

Social mentions

Recent discussions about this repository across the web

May 143 posts
- BitLocker’s trust model may have just had a nightmare. A new GitHub repo claims something wild: «bypass BitLocker protection with physical access + crafted recovery environment behavior.» That’s…
  Read full on X, posted by @RoyAmal
  @RoyAmal · x.com
- #AppSec #Threat_Research New Nightmare Eclipse Vulnerabilities 1⃣ YellowKey Bitlocker Bypass Vulnerability 2⃣ GreenPlasma Windows CTFMON Arbitrary Section Creation EoP Vulnerability
  Read full on X, posted by @ksg93rd
  @ksg93rd · x.com
- I reverse engineered the GreenPlasma Windows 11 primitive and found that CTFMON.exe stores user identity data inside shared section objects under: \Sessions\1\BaseNamedObjects\ Including raw UTF-16…
  Read full on X, posted by @SteveVanasche77
  @SteveVanasche77 · x.com
May 132 posts3 posts
- GreenPlasma Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability
  Read full on X, posted by @cyb3rops
  @cyb3rops · x.com
- existing Elastic defend behavior protection for Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability:
  Read full on X, posted by @SBousseaden
  @SBousseaden · x.com
- /drop0day Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability "The PoC will create an arbitrary memory section object in any directory object write-able by SYSTEM" This…
  Read full on X, posted by @S0ufi4n3
  @S0ufi4n3 · x.com
May 124 posts
- Disgruntled researcher who dropped BlueHammer and RedSun drops two new Windows 11 zero-days: A Bitlocker bypass, nicknamed YellowKey, and LPE, nicknamed GreenPlasma
  Read full on Reddit
  r/cybersecurity
- ❗️🚨 BREAKING: Chaotic Eclipse just published two more public Windows disclosures today and is also threatening Microsoft: "Next patch tuesday will have a big surprise for you Microsoft. And…
  Read full on X, posted by @IntCyberDigest
  @IntCyberDigest · x.com
- New Windows CTFMON exploit creates arbitrary memory sections in SYSTEM-writable directories, enabling privilege escalation. Partial PoC released - works on Windows 11/2022/2026. Hunt for unexpected…
  Read full on X, posted by @DFIR_Radar
  @DFIR_Radar · x.com
- GreenPlasma Windows CTFMON Arbitrary Section Creation Elevation of Privileges Vulnerability
  Read full on X, posted by @Dinosn
  @Dinosn · x.com