CSm1n

6 ms·

1. 1.▲
   by CSm1n 7mo ago

   Notepad was just a wrapper around some default win32 controls. Judging alone by exe size is not right, although probably a “statically linked” notepad would still be smaller than emacs
2. 2.▲
   by CSm1n 8mo ago

   > No, you can't. When you use 7-era toolchain (e.g. VS 2012) it sets the minimum client version in PE header to Vista, not XP much less 2k. Yes, you can! There are even multiple Windows 10 era toolchains that officially support XP.
3. 3.▲
   by CSm1n 3y ago

   It is a flag that says whether the loader data is initialized or not. The layout of PEB_LDR_DATA “leaked” long time ago in public PDBs. More context: It has nothing to do with debugging. However, if you attach to the process early enough, y
4. 4.▲
   by CSm1n 4y ago

   The repositories shown on the first page of GitHub search are not actual exploits. They all expect to be run through an admin powershell/command line. Under normal conditions (default user and UAC on) you will get a warning before the