I am getting very near being able to bypass the login/lock screen on full patched windows 10. I assumed it is not in scope for bounty, but then I realised: Maybe it works over RDP....
Show this thread
If it works Microsoft is probaly not interested as they rejects detailed reports with working POC that spawns cmd as system when executed as guest user. I need some sleep now, but if I make it work I have to figure out what to do next :)
