Added Get-PEB

Returns the process environment block (PEB) of a process.
This commit is contained in:
bitform
2013-01-07 18:42:12 -05:00
parent 7734cb5b34
commit 504ac21aed
3 changed files with 2114 additions and 0 deletions
+4
View File
@@ -56,6 +56,10 @@ Get-DllLoadPath:
Tools to aid in reverse engineering
Get-PEB:
Returns the process environment block (PEB) of a process.
Get-ILDisassembly:
Disassembles a raw MSIL byte array passed in from a MethodInfo object in a manner similar to that of Ildasm.
File diff suppressed because it is too large Load Diff
+1011
View File
File diff suppressed because it is too large Load Diff