[Starbish]

I've tried quite many times for getting how to get signatures without unique strings near them.

And still i don't find anything. All i've found were about using unique string.

Is there any way i can find them?

I tried CKnife::SecondaryAttack. Don't say i can achieve something without that.

Thank you.

[psychonic]

For that specific one, you'd be better off hooking or calling virtually, with the offset from the vtable.

[asherkin]

CKnife::SecondaryAttack is virtual, and thus trivial (even if you don't want to just use a vtable hook at runtime).

Download the Class Informer plugin for IDA, use its RTTI inspection feature to list the classes, use the output of that to jump to the CKnife vtable, use Go To Offset to jump to [vtable index of SecondaryAttack * 4], double-click function at cursor to go to implementation of CKnife::SecondaryAttack, make signature from function bytes.

[Starbish]

Umm.. thank you for your replies..

But i just want to get Signatures.

so.... is there any other suggestions? (if no near unique string, and not virtual function)