Exploit Dev — Windows & the Capstone

Two pieces remain: the other major platform, and the workflow that finds bugs. We cover how Windows exploitation differs — PE, the Microsoft x64 convention, SEH overwrites, SafeSEH/SEHOP/DEP/CFG — plus egghunters, then the full vulnerability-research loop: fuzzing to a crash, triaging the root cause, and patch-diffing for n-days. We close with a capstone that ties all fourteen parts into one decision tree and a map of where to go next.

Related Articles