Yellowkey Bitlocker Exploit repo taken down

Posted by heavymetalusa@reddit | sysadmin | View on Reddit | 32 comments

Referencing this post from a few days back, it looks like the github repo regarding the yellowkey exploit has been removed from github. RIP Nightmare-Eclipse [*]

[-]

JamesTiberiusCrunk@reddit

Isn't it literally just a folder named FsTx at the root of the flash drive?

[-]

Kurgan_IT@reddit

I'm sure no one will be able to use that exploit again, now it's off github. LOL.

[-]

The author has said they had another exploit they were going to publish after the June Patch Tuesday. They appear to have some beef with Microsoft, hence the lack of responsible disclosure, and potentially some mental health issues, based on their blog.

[-]

simask234@reddit

Yeah I've been getting a really weird vibe from their blog posts

[-]

viral-architect@reddit

I'm guessig they reported the issue and were told to pound sand when it came time for Microsoft to give them the money.

[-]

fencepost_ajm@reddit

I thought I saw something about it being reported and dismissed as by design, but maybe I'm mixing it up with something like the Neverending Javascript issue unfixed since 2022.

[-]

north7@reddit

I mean, he who is without some "mental health issues" cast the first stone.
I'm guessing it's a combo of some neuro-spicisity, and trying to go through legit reporting channels and being shrugged off.

[-]

blow_slogan@reddit

I created an offline copy asap. Glad i did haha

[-]

omfgbrb@reddit

All I want to know is where was this shit when we were dealing with CrowdStrike? This would have saved us many many hours...

[-]

blow_slogan@reddit

Lol

[-]

twoyellowhammers@reddit

So, last week I foolishly moved a drive from one machine to a newer (W11) one.

I've NEVER activated Bit locker, but the drive wouldn't open.

I returned it to the original machine (W10), but it still shows as Bit locked.

My research into how to save the data on the drive has led me here, but it seems that this YellowKey thing, which might have saved me, is no longer available.

Is my drive toasty?

Help me fellow Redditors, you're my only hope!

[-]

farva_06@reddit

Sweet, I don't have to apply the mitigations now! /s

[-]

whatThePleb@reddit

Now Micro$lop Winblows is secure again.

gif

[-]

Mind_Matters_Most@reddit

Microsoft is a security boundary /s

[-]

Tricuna@reddit

I'm pretty sure, anyone who knows what's what will have made their own backup of this for educational purposes of course.

[-]

heavymetalusa@reddit (OP)

I got mine 🙏🏾

[-]

~/Code/YellowKey$ ls -lah
total 32K
drwxr-xr-x. 1 spy spy   66 May 14 08:05 .
drwxr-xr-x. 1 spy spy 5.4K May 18 03:23 ..
drwxr-xr-x. 1 spy spy   64 May 14 08:05 FsTx
drwxr-xr-x. 1 spy spy  122 May 14 08:05 .git
-rw-r--r--. 1 spy spy 1.1K May 14 08:05 LICENSE
-rw-r--r--. 1 spy spy 2.0K May 14 08:05 README.md
-rw-r--r--. 1 spy spy  22K May 14 08:05 shell.png

[-]