windows▌

Perform lateral movement across Windows networks using WMI-based remote execution techniques including Impacket wmiexec.py, CrackMapExec, and native WMI commands for stealthy post-exploitation during red team engagements.

Hunt for registry-based persistence mechanisms including Run keys, Winlogon modifications, IFEO injection, and COM hijacking in Windows environments.

Use Sysinternals Autoruns to systematically identify and analyze malware persistence mechanisms across registry keys, scheduled tasks, services, drivers, and startup locations on Windows systems.

Search TheWindowsClub for articles by keyword (with optional category/tag scoping and date/relevance sort), returning each article's title, URL, publish date, excerpt, category and tag IDs.

Capture screenshots of the desktop or specific applications, with options for saving locations and modes.

BusyBox is a single binary that implements many common Unix tools.

Secure Windows desktop automation with strict process validation, permission tiers, and audit logging. \n \n Provides UI Automation Framework (UIA) and Win32 API integration for discovering and interacting with Windows application elements, including window management, input simulation, and process interaction \n Enforces security-first approach with process validation, blocked application lists (password managers, admin tools, security software), and permission tier model (read-only, standard,

Platform-agnostic patterns for building Windows images with Packer.

BusyBox is a single binary that implements many common Unix tools.

Provide systematic methodologies for discovering and exploiting privilege escalation vulnerabilities on Windows systems during penetration testing engagements. This skill covers system enumeration, credential harvesting, service exploitation, token impersonation, kernel exploits, and various misconfigurations that enable escalation from standard user to Administrator or SYSTEM privileges.