<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Windows on NTNINJA</title><link>https://ntninja.com/categories/windows/</link><description>Recent content in Windows on NTNINJA</description><generator>Hugo -- gohugo.io</generator><language>en</language><copyright>© 2026 Ryan Johnson</copyright><lastBuildDate>Thu, 12 Feb 2026 01:00:00 +0000</lastBuildDate><atom:link href="https://ntninja.com/categories/windows/index.xml" rel="self" type="application/rss+xml"/><item><title>WEDP 1.0.0-rc1 and dbgeng-mcp 0.1.0</title><link>https://ntninja.com/posts/wedp-and-dbgeng-mcp-releases/</link><pubDate>Thu, 12 Feb 2026 01:00:00 +0000</pubDate><guid>https://ntninja.com/posts/wedp-and-dbgeng-mcp-releases/</guid><description>&lt;p&gt;Quick update on two projects that have been getting a lot of my attention lately.&lt;/p&gt;

&lt;h2 class="relative group"&gt;WEDP 1.0.0-rc1
 &lt;div id="wedp-100-rc1" class="anchor"&gt;&lt;/div&gt;
 
 &lt;span
 class="absolute top-0 w-6 transition-opacity opacity-0 -start-6 not-prose group-hover:opacity-100 select-none"&gt;
 &lt;a class="text-primary-300 dark:text-neutral-700 !no-underline" href="#wedp-100-rc1" aria-label="Anchor"&gt;#&lt;/a&gt;
 &lt;/span&gt;
 
&lt;/h2&gt;
&lt;p&gt;&lt;a href="https://ntninja.com/wedp/" &gt;WEDP (Windows Exploit Development Plugin)&lt;/a&gt; has hit its first release candidate.
If you are not familiar with it, WEDP is a native WinDbg extension I built for exploit development workflows.
It provides ROP/SEH/stack-pivot gadget search, cyclic pattern utilities, module protection enumeration, inline assembly, and a bunch of other stuff you would normally need multiple tools for.
I wrote a &lt;a href="https://ntninja.com/posts/windbg-mcp-with-wedp/" &gt;post&lt;/a&gt; recently on using it with an MCP server and that really pushed me to clean things up and get a proper release out.&lt;/p&gt;</description></item><item><title>WinDBG MCP with WEDP</title><link>https://ntninja.com/posts/windbg-mcp-with-wedp/</link><pubDate>Fri, 06 Feb 2026 09:00:00 -0500</pubDate><guid>https://ntninja.com/posts/windbg-mcp-with-wedp/</guid><description>&lt;p&gt;I have been late to the game with adopting GenAI into my workflow, but we are at full steam now.
I have slowly been adding it into my daily routines to see where I can gain efficiency leveraging this new tech.
One of the big areas I am playing with right now is for writing Windows based CTF challenges, and now in the past few days, seeing how I can leverage GenAI for writing POCs for these new challenges.
In this post we are going to walk through my initial setup for using the &lt;a href="https://github.com/NadavLor/windbg-ext-mcp" target="_blank" rel="noreferrer"&gt;WinDbg EXT MCP&lt;/a&gt; to control a windbg instance that has the extension I wrote a long time ago, &lt;a href="https://gitlab.com/ntninja-dev/windows-exploit-development/wedp" target="_blank" rel="noreferrer"&gt;WEDP (Windows Exploit Development Plugin)&lt;/a&gt;, to improve the process of going from crash to POC.&lt;/p&gt;</description></item><item><title>Installing Exchange 2019 on Server 2019 for Lab</title><link>https://ntninja.com/posts/install-exchange2k19-server2k19/</link><pubDate>Sat, 08 Oct 2022 09:00:00 -0500</pubDate><guid>https://ntninja.com/posts/install-exchange2k19-server2k19/</guid><description>&lt;p&gt;Right off the bat, if you are looking for resources on how to set up or manange exchange in a production environment then stop reading, this installation was purely for a lab environment to practice red team techniques and play with some recent exploits.&lt;/p&gt;
&lt;p&gt;As someone with 0 training in windows adminstration, getting exchange working in my lab has been a long and painful experience.
It ended up just taking a lot of research to find a web site with a walk through that finally worked for me to get a basic setup.
I will admit that I dont fully understand exactly what every command is completing in the setup process, but its not really necessary for the my use cases.
This 5 part guide from &lt;a href="https://www.nucleustechnologies.com/blog/important-points-to-consider-before-installation/" target="_blank" rel="noreferrer"&gt;nucleus technologies&lt;/a&gt; is what I followed for the most part and has much more detail, but I will add some additional links for dependencies to get everything in one place.&lt;/p&gt;</description></item><item><title>rundll... more like fundll</title><link>https://ntninja.com/posts/rundll-fundll/</link><pubDate>Sun, 25 Sep 2022 09:00:00 -0500</pubDate><guid>https://ntninja.com/posts/rundll-fundll/</guid><description>&lt;p&gt;Have you ever written a DLL that had standalone functionality and wasn&amp;rsquo;t meant to be used as a library?
Considering that library is in the name, this idea seems contrary to what a library should be.
Well, you can thank Microsoft for providing a way to execute standalone functionality from a DLL.
Not only did they do that, they also provide DLLs with functionality that you need this utility to run!!!
Say hello to rundll32, pronounced run dull all smashed as one word in some circles.&lt;/p&gt;</description></item></channel></rss>