Dailydave mailing list archives

<humor>PEB</humor>

From: H D Moore <hdm-daily-dave () digitaloffense net>
Date: Thu, 16 Feb 2006 18:50:49 -0600

Nothing like spending an hour on a stupid bug before noticing that parts 
of your PEB are trashed...

0:000> !peb
PEB at 7FFDF000
InheritedAddressSpace:    No
ReadImageFileExecOptions: No
BeingDebugged:            Yes
ImageBaseAddress:         00400000
Ldr.Initialized: Yes
Ldr.InInitializationOrderModuleList: 42424242 . 42424242
Ldr.InLoadOrderModuleList: 42424242 . 42424242
Ldr.InMemoryOrderModuleList: 42424242 . 42424242
*** unable to read LDR entry at 4242423A

-HD

Current thread:

<humor>PEB</humor> H D Moore (Feb 16)