What problem does it solve? Security researchers and exploit developers need to understand how Windows defensive mechanisms (ASLR, DEP/NX, CFG, CET, SEHOP, heap guards, ACG) work, how to detect them on target binaries, and why exploits fail against protected systems. This Skill provides a structured methodology for auditing, testing, and reasoning about these mitigations. ## Core Features & Use Cases - Mitigation Identification: Maps crash dump exception codes (0xC0000005, 0xC0000409, 0xC0000407) to the specific mitigation that terminated the process, using WinDbg analysis. - Controlled Lab Testing: Provides compiler/linker flag references (/NXCOMPAT, /DYNAMICBASE, /GS, /guard:cf, /CETCOMPAT) and vulnerable test binaries to verify each mitigation in isolation. - Bypass Strategy Research: Documents how ASLR breaks fixed-address ROP chains and prepares researchers for advanced bypass study. - Use Case: A researcher analyzing why a Week 5 stack overflow exploit fails on a hardened Windows 11 binary can use this Skill to compile graduated test targets, trigger /GS cookie checks, and confirm via WinDbg which mitigation blocked execution. ## Quick Start Ask the AI to explain how CFG and CET shadow stacks block indirect calls and how to verify them on a compiled Windows binary using dumpbin and WinDbg.
