wraith/
lib.rs

1#![cfg(windows)]
2#![deny(unsafe_op_in_unsafe_fn)]
3#![allow(clippy::missing_safety_doc)] // we document safety in SAFETY comments
4
5//! wraith-rs: Safe abstractions for Windows PEB/TEB manipulation
6//!
7//! This library provides high-level, safe APIs for interacting with Windows
8//! process internals, including:
9//!
10//! - PEB/TEB structure access with version-aware field offsets
11//! - Module enumeration and querying
12//! - Module unlinking from PEB lists
13//! - Manual PE mapping (LoadLibrary bypass)
14//! - Direct/indirect syscall invocation
15//! - Hook detection and removal
16//! - Anti-debug techniques
17
18pub mod arch;
19pub mod error;
20#[cfg(any(
21    feature = "manual-map",
22    feature = "syscalls",
23    feature = "spoof",
24    feature = "hooks",
25    feature = "antidebug",
26    feature = "unlink",
27    feature = "remote"
28))]
29pub mod manipulation;
30#[cfg(feature = "navigation")]
31pub mod navigation;
32pub mod structures;
33pub mod util;
34pub mod version;
35
36// re-exports for convenience
37pub use error::{Result, WraithError};
38pub use structures::{Peb, Teb};
39pub use version::{WindowsRelease, WindowsVersion};
40
41/// library version
42pub const VERSION: &str = env!("CARGO_PKG_VERSION");
wraith/lib.rs

wraith/
lib.rs
