Fun with VirtualQuery - Reading the PEB without Segment Registers
Utilizing memory scans to find the Process Environment Block in a novel way.
2025-01-03→
GetFullPathName Directory Check Bypass
GetFullPathName doesn't handle NT paths very well, let's use this for fun and profit
2024-01-03→
hypervis0r