PoC or GTFO, Volume 2 by Manul Laphroaig

Author:Manul Laphroaig
Language: eng
Format: epub
Publisher: No Starch Press
Published: 2018-09-04T16:00:00+00:00

Cool. We can just add a check here. Perhaps something like this?

Now just replace our ret instruction with the check. ret in x86 is simply this:

where our code is this:

Sadly, this will not work for several reasons. The most glaring problem is that ret is only one byte, whereas our fancy checker is fifteen bytes. For more complicated programs, our checker could be even larger! Thus, we cannot simply replace the ret with our code, as it will overwrite some code after it—in fact, it would overwritemain. We’ll need to do some digging and replace our lengthy code with some relocated parasite, symbiont, code cave, hook, or detour—or whatever you like to call it!

Download

Copyright Disclaimer:
This site does not store any files on its server. We only index and link to content provided by other sites. Please contact the content providers to delete copyright contents if any and email us, we'll remove relevant links or contents immediately.