WhoamiAlternatives

Alternatives to whoami Some experiments to retrieve the current username without calling whoami.exe or similar binaries. Method 1: PRTLUSERPROCESSPARAMETERS Get the environment variables from the PEB structure and parse it to find the username. Function NtQueryInformationProcess returns a...

Nim_DInvoke

Nim DInvoke D/Invoke implementation in Nim All Nim binaries typically expose the same 58-60 Windows API functions: All other Windows API functions are typically resolved on runtime via GetProcAddress and LoadLibraryA as mentioned in OffensiveNim or this blog post. So, it's not possible to hide AP...

Kerio Firewall DoS

DoS on executable application's PEB parsing...