Metasploit mailing list archives

locating DLL base in Win7?


From: Jun Koi <junkoi2004 () gmail com>
Date: Fri, 8 Jul 2011 19:17:47 +0800

hi,

anybody seen this interesting note?

http://www.insomniasec.com/publications/some_win7_code.txt

i looked at those code, and dont understand how they work. few questions:

1) so it seems accesing to PEB is no longer necessary?

2) what exactly are those structures kept in the low part of DS segment??

3) is this only for Win7, or this technique is also valid with prior
versions of Windows?

thanks,
Jun
_______________________________________________
https://mail.metasploit.com/mailman/listinfo/framework


Current thread: