I am trying to learn actually how to get to the PEB inside of TEB. I have tried this with windbg
but could not manage to dump the PEB with stuff like:
!peb
or
dt nt!_PEB_LDR_DATA
And others. But, I could not manage to get the PEB dumped. So also my favorite debugger is still immunitydbg
. So, I was trying to get to the information using immunitydbg
CLI. But the nearest thing I have managed to get to PEB is dumping the TEB.
d fs:[0]
So, I there anyhow someway inside of immunity do get the contents of TEB/PEB? I also tried to use the Ollysdbg
PE Dump plugin but that only gave me another exe file with different contents. And also i am not sure if the PE Plugin does the right thing for me.