Windows internals primitives and post-exploitation notes. See windows-internals for ordering.

Internals

• pe-format · windows-processes-and-threads
• tokens-and-privileges · user-account-control
• windows-api-and-syscalls
• windows-enumeration

Credential primitives

• credential-dumping · token-impersonation
• dpapi-secrets · lsa-secrets

Privesc

• See privilege escalation index.

Exploit dev (intro)

• See exploit dev for primitives.

Boot / firmware

• pkfail-uefi-secureboot-bypass