Windows Exploitation Techniques: Winning Race Conditions with Path Lookups

This research demonstrates a Windows Object Manager namespace exploitation technique that intentionally slows object name resolution (using long names, deep directory recursion, symbolic link reparses, hash-colliding entries, and shadow directories) to expand the race window from microseconds to minutes; the PoC can enable race-condition bypasses, local denial-of-service, and potentially privilege escalation when combined with other bugs.