What problem does it solve? Security researchers and exploit developers need to understand how Windows defensive mechanisms work before they can diagnose why exploits fail, analyze crash dumps, or plan mitigation bypass strategies in authorized testing environments. ## Core Features & Use Cases - Mitigation Deep-Dive: Covers ASLR, DEP/NX, CFG, CET/Shadow Stack, SEHOP, Heap Guard, and ACG with both protection mechanics and known bypass approaches. - Crash Dump Diagnosis: Maps exception codes (0xC0000005, 0xC0000409, 0xC0000374) to the specific mitigation that terminated a process, using WinDbg analysis workflows. - Hands-On Lab Methodology: Provides compiler/linker flag references, test binaries, and pwntools scripts to verify each mitigation's effect on Week 5-style exploits. - Use Case: When a stack overflow exploit crashes with exit code 0xC0000409 on a hardened Windows target, use this Skill to identify the /GS cookie check as the cause and plan the appropriate bypass research path. ## Quick Start Use the windows-mitigations skill to explain why my exploit against a /guard:cf compiled binary fails with a CFG validation error and how to verify it in WinDbg.
