Technique Search Instance

HTTP 200 OK
Allow: GET, PUT, PATCH, DELETE, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "id": 217,
    "key": "change-module-name-at-runtime",
    "unprotect_id": "U1238",
    "name": "Change Module Name at Runtime",
    "description": "It is possible to change the name of the current process or any of its modules at runtime. This is achieved by accessing the process PEB's member 'Ldr', in particular it has a member 'InOrderMemoryLinks' which we can iterate through to get a list of the process's modules. \r\n\r\nOn each iteration it gets a `PLDR_DATA_TABLE_ENTRY` structure to work with which contains a member `UNICODE_STRING FullDllName`, which can be overwritten with the module name.",
    "windows": "",
    "linux": "",
    "macos": "",
    "resources": "",
    "creation_date": "2022-07-18T06:56:56.957000Z",
    "tags": "",
    "modification_date": "2022-07-18T06:56:56.957000Z",
    "category": [
        4
    ],
    "rules": [],
    "attachments": [],
    "featured_api": [],
    "contributors": []
}