Understanding the PEB
Created|Updated|windows internals
|Post Views:
Understanding The PEB
Coming soon…
Author: 0xd1s
Copyright Notice: All articles on this blog are licensed under CC BY-NC-SA 4.0 unless otherwise stated.
Related Articles

2025-06-24
Understanding the PE
Understanding PEWhat does it mean ?The Portable Executable (PE) format is the standard file format used for executables, object code, dynamic-link libraries (DLLs), and other binary files on both 32-bit and 64-bit versions of Windows, as well as in UEFI environments. It serves as the primary format for executable files on Windows NT-based systems, including file types such as .exe, .dll, .sys (system drivers), and .mui. Essentially, the PE format is a structured data container that provides...

2025-09-25
Pivoting, Tunneling and Lateral Movement - Techniques
Pivoting, Tunneling and Lateral Movement - TechniquesIf you want to scan ports with nmap using proxychains, the go to command is:proxychains nmap -sT -Pn -p 22 internal.server.local Since proxychains allows just direct TCP connect scans. Local Port Forwarding & Remote Port ForwardingLocal Port Forwardingssh -L [bindaddr]:[port]:[dsthost]:[dstport] [user]@[host] Remote Port Forwardingssh -R [bindaddr]:[port]:[localhost]:[localport]...

2025-06-24
Vulnlab Retro
Retro VLNMAP Scanning:1234567891011121314151617Some closed ports may be reported as filtered due to --defeat-rst-ratelimitPORT STATE SERVICE REASON53/tcp open domain syn-ack ttl 127135/tcp open msrpc syn-ack ttl 127139/tcp open netbios-ssn syn-ack ttl 127445/tcp open microsoft-ds syn-ack ttl 127464/tcp open kpasswd5 syn-ack ttl 127593/tcp open http-rpc-epmap syn-ack ttl 1273268/tcp open globalcatLDAP syn-ack ttl...
Announcement
Welcome to the Red Teaming world !