Skip to content

Commit

Permalink
Update README.md
Browse files Browse the repository at this point in the history
  • Loading branch information
thomasxm authored Jul 12, 2024
1 parent d344a7e commit 2b0a548
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -313,7 +313,7 @@ I intend to name this memory guard “Sifu memory guard” to pay tribute to the
### Additional Steps for Further Inspection
1. Write a function to search for op codes `jmp r11` from only the memory of type `MEM_IMAGE` with `PAGE_EXECUTE_READ` permission and store the RoP gadget locally.
1. Write a function to search for op codes `jmp r11` from only the memory of type `MEM_IMAGE` with `PAGE_EXECUTE_READ` permission and store the Return-oriented programming (RoP) gadget locally.
2. Break at `Kernel32!BaseThreadInitThunk`.
3. Change `Rdx` -> RoP gadget (trampoline code).
4. Change `R11` -> Real start address.
Expand Down

0 comments on commit 2b0a548

Please sign in to comment.