Windows Mitigations

This is a bypass encyclopedia for Windows exploit mitigations, covering everything from ASLR and DEP to newer stuff like CFG, CET shadow stacks, and WDAC. You get fingerprinting commands to identify what's protecting a target, then concrete bypass techniques for each layer: ROP chains for DEP, partial overwrites for ASLR, COOP for CFG, LOLBins for application control. The WDAC and ASR sections are especially practical with actual command examples (MSBuild, regsvr32 scriptlets). It also covers defensive evasion like ETW blinding and PPL bypass via vulnerable drivers. Use this when you need to understand the mitigation stack on a target and plan your exploitation path. More reference material than step-by-step automation, but that's what you want for this domain.

Install to Claude Code

npx -y skills add hypnguyen1209/offensive-claude --skill windows-mitigations --agent claude-code