Ideas for personal offset updates

[Chrisvinley]

Have you considered replacing the offset update script with an alternative approach: directly reading the system's ntoskrnl.exe and automatically replacing the offsets? I believe this method could avoid WinBindex failing to retrieve ntoskrnl.exe for certain systems.

[krispybyte]

Yes, this was considered and would work. However, I was thinking of instead having a remote server to generate the entire ROP chain, adding dead code and random gadgets etc. but it may be a bit too complex to maintain and deploy.. Might go with the local approach.

[ck0i]

Local approach is definitely the move here, remote server would give the user a point of failure/something they have to rely on. Give the user as much freedom as possible to craft their own chains.