🪟 Windows Security
Windows penetration testing and security assessment guide. Covering privilege escalation, Windows services exploitation, UAC bypass, credential theft, and defense evasion on Windows systems.
UAC Bypass
HighUser Account Control bypass techniques. Registry modifications, COM hijacking.
Full GuideLSASS Dumping
CriticalExtract credentials from LSASS process. MiniDump, direct attack, defender bypassing.
Full GuideSAM Database
HighExtract password hashes from SAM database. Registry and volume shadow copy techniques.
Full GuideWindows Defender
HighDisable, bypass, AMSI patching, signature removal, real-time protection tampering.
Full GuideBlueHammer LPE
CriticalWindows Defender driver exploitation for local privilege escalation to SYSTEM.
Full Guide🛠️ Essential Tools
Mimikatz
Credential extraction, pass-the-hash, SAM dumping, token manipulation.
WinPEAS
Windows privilege escalation audit script. Check for privesc vectors.
PowerUp
PowerShell privilege escalation checking. Service misconfigs, registry issues.
PowerSploit
PowerShell penetration testing framework. Privesc, persistence, exfiltration.
Seatbelt
Security assessment script. System checks, AMSI, WDigest, user sessions.
SharpUp
C# rewrite of PowerUp. Check for privilege escalation vectors.