Raised This Month: $ Target: $400
 0% 

[Orpheu] Memory hack


  
 
 
Thread Tools Display Modes
Prev Previous Post   Next Post Next
Arkshine
AMX Mod X Plugin Approver
Join Date: Oct 2005
Old 12-08-2014 , 18:57   Re: [Orpheu] Memory hack
Reply With Quote #6

You answer yourself already. You can either use a signature which points to the related bytes start or getting a function address and adding n bytes to points where you want.

Once you get your address, just a matter to NOP all related bytes with 0x90.

I don't know the context and don't know much about assembly, so for a simple call in linux you will have E8 X X X X where X X X X is the function address. So you need to NOP these 5 bytes. There are probably tips to not necessary replace all to 90's but don't know. You may have to care about function with arguments, you will have some bytes before and you could corrupt the stack easily depending what you do/how is called the function.
__________________

Last edited by Arkshine; 12-08-2014 at 18:59.
Arkshine is offline
 



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 15:25.


Powered by vBulletin®
Copyright ©2000 - 2024, vBulletin Solutions, Inc.
Theme made by Freecode