Skip to content
Back to skills

Windows Internals Triage

ASecurity

Use when triaging Windows binaries. REDB plus Debugger.

  • 86 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added September 22, 2026
securityapi

Works with

  • api

Security analysis

A100/100

Scanned September 22, 2026

npx -y skills add 0dayInc/pwn --skill windows-internals-triage --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Windows Internals Triage?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Windows Internals Triage
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/0dayinc-windows-internals-triage/badge)](https://www.skillsdirectory.com/skills/0dayinc-windows-internals-triage)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: windows-internals-triage
description: Use when triaging Windows binaries. REDB plus Debugger.
---

# Windows internals triage

1. `PWN::Plugins::REDB.strings(match: 'ntdll')` on the PE.
2. Imports/exports from `funcs`; xrefs for interesting APIs.
3. Live verification uses `PWN::Plugins::Debugger` when a gdbstub exists.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…