Diving into Windows Remote Access Service for Pre-Auth Bugs

Question: "Prove to me that you achieved something in hunting bugs in this component."
Answer: "The vendor finally changed their bounty rule for this component after my continuous bug reports."
Unauthenticated remote code execution bugs are always the focus of both offensive and defensive vulnerability research. Because of the high impact of these critical bugs, the Windows insider preview bounty program pays $10,0000 for an unauthenticated RCE bug....
By: Yuki Chen
Full Abstract and Presentation Materials: www.blackhat.com/us-23/briefi...