wraith/
lib.rs

1#![cfg(windows)]
2#![deny(unsafe_op_in_unsafe_fn)]
3#![allow(clippy::missing_safety_doc)] // we document safety in SAFETY comments
4
5//! wraith-rs: Safe abstractions for Windows PEB/TEB manipulation
6//!
7//! This library provides high-level, safe APIs for interacting with Windows
8//! process internals, including:
9//!
10//! - PEB/TEB structure access with version-aware field offsets
11//! - Module enumeration and querying
12//! - Module unlinking from PEB lists
13//! - Manual PE mapping (LoadLibrary bypass)
14//! - Direct/indirect syscall invocation
15//! - Hook detection and removal
16//! - Anti-debug techniques
17
18pub mod arch;
19pub mod error;
20#[cfg(any(
21    feature = "manual-map",
22    feature = "syscalls",
23    feature = "hooks",
24    feature = "antidebug",
25    feature = "unlink"
26))]
27pub mod manipulation;
28#[cfg(feature = "navigation")]
29pub mod navigation;
30pub mod structures;
31pub mod util;
32pub mod version;
33
34// re-exports for convenience
35pub use error::{Result, WraithError};
36pub use structures::{Peb, Teb};
37pub use version::{WindowsRelease, WindowsVersion};
38
39/// library version
40pub const VERSION: &str = env!("CARGO_PKG_VERSION");