41554 blogs · 4,417,066 posts Claim your blog

Record · corpus.blog/posts/01a0871d-18ea-73c2-8a9e-baa8de0d9131

How I Leveraged WMI to Enumerate a Process Modules and Their Base Addresses

0xsp.com · published 15 April 2024

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at 0xsp.com Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 7
Words captured: 1,722

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.netero1010-securitylab.com/evasion/alternative-process-injection

netero1010-securitylab.com

https://trevorsullivan.wordpress.com/2010/08/25/powershell-finding-currently-loaded-dlls/

trevorsullivan.wordpress.com

https://learn.microsoft.com/en-us/windows/win32/api/processthreadsapi/nf-processthreadsapi-openprocess

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/api/psapi/nf-psapi-getmodulebasenamew

learn.microsoft.com

https://learn.microsoft.com/en-us/windows/win32/api/psapi/nf-psapi-enumprocessmodules

learn.microsoft.com

https://github.com/0xsp-SRD/0xsp.com/blob/main/WMI_PROC/Program.c

github.com

How I Leveraged WMI to Enumerate a Process Modules and Their Base Addresses Read at the source ↗