From 2b0a548f753655ddc7a2f2abd27894d60100a705 Mon Sep 17 00:00:00 2001 From: Thomas M <44269971+thomasxm@users.noreply.github.com> Date: Fri, 12 Jul 2024 20:29:14 +0100 Subject: [PATCH] Update README.md --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 72bda37..72024a0 100644 --- a/README.md +++ b/README.md @@ -313,7 +313,7 @@ I intend to name this memory guard “Sifu memory guard” to pay tribute to the ### Additional Steps for Further Inspection -1. Write a function to search for op codes `jmp r11` from only the memory of type `MEM_IMAGE` with `PAGE_EXECUTE_READ` permission and store the RoP gadget locally. +1. Write a function to search for op codes `jmp r11` from only the memory of type `MEM_IMAGE` with `PAGE_EXECUTE_READ` permission and store the Return-oriented programming (RoP) gadget locally. 2. Break at `Kernel32!BaseThreadInitThunk`. 3. Change `Rdx` -> RoP gadget (trampoline code). 4. Change `R11` -> Real start address.