Peb

wraith::structures::peb

Struct Peb 

Source 
pub struct Peb { /* private fields */ }
Expand description

safe wrapper around PEB access

Implementations§

Source§

impl Peb

Source

pub fn current() -> Result<Self>

get PEB for current process

Source

pub fn as_ptr(&self) -> *mut u8

raw PEB pointer

Source

pub fn being_debugged(&self) -> bool

check BeingDebugged flag

Source

pub unsafe fn set_being_debugged(&mut self, value: bool)

set BeingDebugged flag

§Safety

modifies process state

Source

pub fn nt_global_flag(&self) -> u32

get NtGlobalFlag value

Source

pub unsafe fn set_nt_global_flag(&mut self, value: u32)

set NtGlobalFlag value

§Safety

modifies process state

Source

pub fn ldr(&self) -> Option<&PebLdrData>

get pointer to PEB_LDR_DATA

Source

pub unsafe fn ldr_mut(&mut self) -> Option<&mut PebLdrData>

get mutable pointer to PEB_LDR_DATA

§Safety

caller must ensure exclusive access

Source

pub fn image_base(&self) -> NativePtr

get image base address

Source

pub fn process_heap(&self) -> NativePtr

get process heap pointer

Source

pub fn number_of_processors(&self) -> u32

get number of processors

Trait Implementations§

Source§

impl Send for Peb

Source§

impl Sync for Peb

Auto Trait Implementations§

§

impl Freeze for Peb

§

impl RefUnwindSafe for Peb

§

impl Unpin for Peb

§

impl UnwindSafe for Peb

Blanket Implementations§

Source§

impl<T> Any for T
where T: 'static + ?Sized,

Source§

fn type_id(&self) -> TypeId

Gets the TypeId of self. Read more
Source§

impl<T> Borrow<T> for T
where T: ?Sized,

Source§

fn borrow(&self) -> &T

Immutably borrows from an owned value. Read more
Source§

impl<T> BorrowMut<T> for T
where T: ?Sized,

Source§

fn borrow_mut(&mut self) -> &mut T

Mutably borrows from an owned value. Read more
Source§

impl<T> From<T> for T

Source§

fn from(t: T) -> T

Returns the argument unchanged.

Source§

impl<T, U> Into<U> for T
where U: From<T>,

Source§

fn into(self) -> U

Calls U::from(self).

That is, this conversion is whatever the implementation of From<T> for U chooses to do.

Source§

impl<T, U> TryFrom<U> for T
where U: Into<T>,

Source§

type Error = Infallible

The type returned in the event of a conversion error.
Source§

fn try_from(value: U) -> Result<T, <T as TryFrom<U>>::Error>

Performs the conversion.
Source§

impl<T, U> TryInto<U> for T
where U: TryFrom<T>,

Source§

type Error = <U as TryFrom<T>>::Error

The type returned in the event of a conversion error.
Source§

fn try_into(self) -> Result<U, <U as TryFrom<T>>::Error>

Performs the conversion.