Windows Mitigations

You get fingerprinting commands to identify what's protecting a target, then concrete bypass techniques for each layer: ROP chains for DEP, partial overwrites for ASLR, COOP for CFG, LOLBins for application control. The WDAC and ASR sections are especially practical with actual command examples (MSBuild, regsvr32 scriptlets). It also covers defensive evasion like ETW blinding and PPL bypass via vulnerable drivers. Use this when you need to understand the mitigation stack on a target and plan your exploitation path. More reference material than step-by-step automation, but that's what you want for this domain.