add tip

cuicuicuinice · Apr 7, 2023 · f25b635 · f25b635
1 parent 2173322
commit f25b635
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 0 deletions.
diff --git a/find_kernel_func/find_proc_pid_status/find_proc_pid_status.cpp b/find_kernel_func/find_proc_pid_status/find_proc_pid_status.cpp
@@ -67,6 +67,7 @@ void SearchFeature(const char* image, size_t image_size) {
 	result_map[{"proc_pid_status (seccomp) function", seccomp_text_offset}] = std::make_shared<std::vector<xrefs_info>>();
 	find_xrefs_link((const char*)image, image_size, result_map);
 	printf_xrefs_result_map(result_map);
+	std::cout << "请注意！proc_pid_status里面的Uid取值不是cred而是real_cred，需将real_cred的值+8才能得到cred，即cred=real_cred+8" << std::endl;
 }
 
 int main(int argc, char* argv[]) {

diff --git a/find_kernel_func/find_proc_pid_status/find_proc_pid_status.exe b/find_kernel_func/find_proc_pid_status/find_proc_pid_status.exe