Python Penetration Testing Cookbook

Thread Environment Block (TEB)

Some process may have one or more threads. In that case, each process starts with a single primary thread and creates more additional threads when required. Also, all these threads share the same virtual addresses. Each thread has its own resources which include the exception handlers, local storage, and much more. So, like PEB, each thread has TEB. TEB also resides in the process address space.

You can read more on processes and threads in the following article: https://msdn.microsoft.com/en-us/library/windows/desktop/ms681917(v=vs.85).aspx Also, more on TEB structures can be found here: https://msdn.microsoft.com/en-us/library/windows/desktop/ms686708(v=vs.85).aspx

We require a Windows XP machine installed ...