Course 25 - API Python Hacking | Episode 2: Foundations of Windows Internals and API Mechanisms

In this lesson, you’ll learn about:Fundamentals of Windows Processes and ThreadsA process is a running program with its own virtual memory spaceThreads are units of execution inside processes, allocated CPU time to perform tasksAccess tokens manage privileges and access rights; privileges can be enabled, disabled, or removed but cannot be added to an existing tokenKey System Programming TerminologyHandles: Objects that act as pointers to memory locations or system resourcesStructures: Memory formats used to store and pass data during API callsWindows API MechanicsHow applications interact with the OS via user space → kernel space transitionsAnatomy of an API call, including parameters and naming conventions:"A" → Unicode version"W" → ANSI version"EX" → Extended or newer versionCore Dynamically Linked Libraries (DLLs)kernel32.dll: Process and memory managementuser32.dll: Graphical interface and user interactionResearching functions using Windows documentation and tools like Dependency Walker to identify both documented and undocumented API callsKey OutcomeUnderstanding of how Windows manages processes, threads, and privileges, along with the workflow for interacting with the operating system through APIs and DLLs.You can listen and download our episodes for free on more than 10 different platforms:https://linktr.ee/cybercode_academy