Security Mechanisms

Kernel

Virtualization

Boot

Syscalls

Rootkits

Driver Abuse

Monitoring


IAT-EAT

PE

PEB (PROCESS ENVIRONMENT BLOCK)

PIPEs

HANDLES

NTAPI

MEMORY

PROCESSES AND THREADS


WINDOWS RESOURCES DOWNLOAD

CONTENT DUMP


useful disk analyzer:

https://diskanalyzer.com/

>How do I activate Windows?
 
https://github.com/massgravel/Microsoft-Activation-Scripts
HWID mimics OEM activation to generate a permanent legitimate license.
 
>>Which version should I install?
 
>Education/Enterprise
 
Can disable telemetry and get an delay updates a year.
 
>LTSC / IoT LTSC
LTSC = 5 years support, VL/KMS only
IoT LTSC = 10 years support, HWID only
Comes with Win32 system apps, no MS Store, no feature updates, security updates only.
If you need MS Store, run this in cmd: wsreset -i
 
>Do I even need IoT LTSC?
 
W10 Home/Pro/Edu/WS/Ent editions end support in 10/2025, LTSC in 2027, IoT LTSC lasts until 2032.
 
>How do I activate Office?
 
https://github.com/abbodi1406/KMS_VL_ALL_AIO/releases
Installs a KMS server emulator, not ideal as KMS trips AV sometimes and deactivates. Alternatively, use MSOffice through your browser since it's free. As a last resort, you can try LibreOffice and set it to save as Office file formats.
 
>Where can I get Windows/Office ISOs?
 
https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool
Other sources:
https://rentry.org/fwt#links
https://tb.rg-adguard.net
https://www.heidoc.net/php/myvsdump.php SHA1 database (search SHA1, download anywhere)
Always verify SHA1 with 7zip for non-MS sources
 
>How do I debloat?
 
https://www.oo-software.com/en/shutup10
https://wpd.app
 
>Windows/Office installation guide
https://pastebin.com/Q4ced4rE
 
>Is Windows 11 good?
 
>Should I upgrade?
 
You can if you want to.
 
WinInfo Pasta:
https://rentry.org/fwt
 
Edge remover:
https://gist.github.com/ishad0w/3b79bf829e9725aa102b2e8446bb5ef8
 
Office:
https://docs.microsoft.com/en-us/deployoffice/overview-office-deployment-tool

SYSCALL TABLE (LINUX) = SSDT - System Service Dispatch Table (WINDOWS)

SysWhispers helps with evasion by generating header/ASM files implants can use to make direct system calls.

https://github.com/jthuraisamy/SysWhispers

— — — — — -Userland — — — — — — | — — — Kernel Land — — —
 
RPM —> NtReadVirtualMemory —> SYSCALL —> NtReadVirtualMemory
 
Kernel32 — — ntdll — — — — — — — — — — — — — — — — ntoskrnl

https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool


🌱 Back to Garden

18 items under this folder.