137174e45d
winpe: Update README with new instructions
2025-03-18 21:26:08 +01:00
66b9fa2a3c
winpe: use modified version of WinPmem instead of DumpIt
...
This does not perform a full memory dump, but instead searches
incrementally and stops after the first match.
2025-03-18 21:25:28 +01:00
1148128d17
winpe: add customization script and some more debugging notes
...
Also add a warning that the WinPE-based exploitation strategy might
be less reliable than its Linux-based counterpart.
2025-03-18 07:13:23 +01:00
d200843737
winpe: improve second stage exploitation script
...
Abort in case VMK is not found. Include diskpart documentation as wimc
is not available, fix typo and provide more specific example command.
2025-03-12 18:13:35 +01:00
f323724392
winpe: use 7zip to extract files instead of mounting the iso
...
This should hopefully avoid problems with mounting the ISO in certain
setups and avoid the need for a privileged container.
2025-03-12 06:38:31 +01:00
364ce66645
Update README.md
2025-02-26 14:25:56 +01:00
403459e155
Update README with WinPE exploitation
2025-02-26 11:56:56 +01:00
5995eff4a5
Add high-level wrapper scripts for exploitation convenience
2025-02-26 11:29:15 +01:00
e1332680d6
Add WinPE based exploitation environment
2025-02-26 10:42:14 +01:00
487efc201b
Implement generic VMK search tool
...
Given a raw memory dump, search for a VMK and optionally store it
in a file.
2025-02-26 10:42:14 +01:00
3f841cbbcd
Move initramfs generation into subfolder
2025-02-26 10:42:14 +01:00
7b5545c64e
Rename Linux related artifact download scripts
2025-02-26 09:54:30 +01:00
57611da4ca
Rename BCD generation script and resulting configuration file
2025-02-26 09:54:30 +01:00
9c84a43741
Update README
...
Fix typos, add section about working devices, provide additional
information regarding the source of `bootmgfw.efi`.
2025-02-06 10:37:29 +01:00
8ff4a49e23
Add basic README
2025-02-03 14:08:04 +01:00
3322e67fe4
Add PXE boot helper scripts
...
Except for the Windows boot manager the necesary artifacts are downloaded
from public resources.
This work was done in parallel and drew some inspiration from similar
avenues by Andreas Grasser.
https://github.com/andigandhi/bitpixie
2025-01-31 17:52:37 +01:00
bd07ff3052
Import initramfs generation scripts for bitpixie exploitation
...
It is based on a stripped down version of Filippo Valsorda's rootfs-free
immutable NAS project with various bitpixie related hacks added.
https://words.filippo.io/dispatches/frood/
2025-01-31 16:40:19 +01:00
Marc André Tanner