Windows — topics
Windows internals primitives and post-exploitation notes. See windows-internals for ordering.
Internals
- pe-format · windows-processes-and-threads
- tokens-and-privileges · user-account-control
- windows-api-and-syscalls
- windows-enumeration · winpeas-enumeration-flow
- windows-privesc-checklist
- windows-kernel-objects-deep · windows-kernel-debugging-deep
Credential primitives
- credential-dumping · token-impersonation
- dpapi-secrets · lsa-secrets
- cached-domain-credentials
- wdigest-cleartext-enable
- credential-guard-bypass
- lsass-protection-ppl
- token-stealing · sedebug-privilege-abuse
Process injection family
- reflective-dll-injection
- thread-hijacking
- ntmapviewofsection-injection
- early-bird-apc
- apc-injection
- atom-bombing
- module-stomping
- ssp-package-injection
- process-hollowing
- process-doppelganging
- process-herpaderping
- process-ghosting
Privesc
- See privilege escalation index.
Exploit dev (intro)
- See exploit dev for primitives.