{"enrichment":{"faq":[{"a":"windows-mitigations-bypass is an MIT-licensed skill that maps techniques for defeating Windows exploit mitigations\u2014memory protections like ASLR, DEP, CFG, and CET\u2014alongside platform security controls including WDAC, ASR, AMSI, ETW, and PPL. It pairs each bypass method with detection signatures and operational security notes to support both offensive testing and defensive hardening.","q":"What is windows-mitigations-bypass and what does it cover?"},{"a":"windows-mitigations-bypass documents evasion techniques for WDAC (Windows Defender Application Control), ASR (Attack Surface Reduction), AMSI (Antimalware Scan Interface), and ETW (Event Tracing for Windows). The skill includes reconnaissance scripts and operational security guidance for each control, enabling testers to understand bypass vectors while defenders can harden their configurations.","q":"How to bypass windows security controls WDAC ASR and related defenses?"},{"a":"Yes. windows-mitigations-bypass includes a quick-start workflow and reconnaissance scripts for fingerprinting a target's mitigation landscape before weaponizing an exploit. This reconnaissance capability lets operators evaluate BYOVD/kernel versus userland attack paths based on VBS and HVCI state before committing to an exploitation strategy.","q":"Can windows-mitigations-bypass help fingerprint target system mitigations?"},{"a":"windows-mitigations-bypass covers bypass methods for ASLR, DEP, CFG, CET, ACG, and CIG protections. It includes ROP gadget finders and shadow stack evasion techniques, along with detection signatures for each bypass, enabling both red-team exploit development and blue-team defensive hardening.","q":"What memory-corruption exploit techniques does this skill address?"},{"a":"Yes. windows-mitigations-bypass documents techniques for dumping protected processes like LSASS and killing PPL-protected security software, paired with detection signatures and operational security notes to help both offensive testers and defenders understand the attack surface.","q":"Does windows-mitigations-bypass cover PPL and LSASS protection bypass?"}],"shadow_tags":["exploit-hardening","memory-safety-bypass","kernel-primitives","telemetry-evasion","code-execution-control","process-protection","driver-exploitation","post-exploitation-prep","security-assessment","offensive-tradecraft"],"summary_rewrite":"This skill maps techniques for defeating Windows exploit mitigations\u2014memory protections like ASLR, DEP, CFG, and CET\u2014alongside platform security controls including WDAC, ASR, AMSI, ETW, and PPL. It pairs each bypass method with detection signatures and operational security notes to support both offensive testing and defensive hardening. Includes reconnaissance scripts, gadget finders, and a quick-start workflow for fingerprinting a target's mitigation landscape before weaponizing an exploit."},"files":[{"bytes":8173,"path":"skills/windows-mitigations/SKILL.md","sha256":"9233ca4757ff39cc4c70f4289c187c77e55f764cf6741814b93e133c41a12a9e","url":"https://skillfed.io/files/hypnguyen1209/offensive-claude/windows-mitigations/92e62cda/SKILL.md"}],"id":"hypnguyen1209/offensive-claude/windows-mitigations","links":{"html":"https://skillfed.io/hypnguyen1209/offensive-claude/windows-mitigations","md":"https://skillfed.io/hypnguyen1209/offensive-claude/windows-mitigations.md","repo":"https://github.com/hypnguyen1209/offensive-claude"},"meta":{"agents_supported":[],"first_seen":"2026-07-28","forks":58,"language":"Python","last_updated":"2026-07-03","license":"MIT","name":"windows-mitigations-bypass","publisher":"hypnguyen1209","stars":326},"relations":{"similar":[{"id":"hypnguyen1209/offensive-claude/windows-boundaries"},{"id":"hypnguyen1209/offensive-claude/threat-hunting"},{"id":"gmh5225/awesome-game-security/windows-kernel"},{"id":"hypnguyen1209/offensive-claude/privesc-windows"},{"id":"hypnguyen1209/offensive-claude/edr-evasion"},{"id":"hypnguyen1209/offensive-claude/malware-analysis"},{"id":"yaklang/hack-skills/windows-av-evasion"},{"id":"blacklanternsecurity/red-run/av-edr-evasion"},{"id":"gmh5225/awesome-game-security/overview"},{"id":"hypnguyen1209/offensive-claude/exploit-development"}]},"slug":{"owner":"hypnguyen1209","repo":"offensive-claude","skill":"windows-mitigations"},"version":"92e62cda"}