偶然发现的一个seh特性,只要返回地址在异常表记录范围内,Windows就会正常处理seh,把ip修改回到Handler的地址,只要找到Handler代码是直接返回的函数就能实现任意使用seh
r3可以利用IsBadReadPtr
r0可以利用KdpSysWriteMsr
-
Notifications
You must be signed in to change notification settings - Fork 26
cs1ime/sehcall
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
Windows X64 mode use seh in manual mapped dll or manual mapped sys
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published