From: Joanna Rutkowska (joannamailsnare.net)
Date: Sun Nov 14 2004 - 10:53:55 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

...is more or less equivalent to the following code:

int swallow_redpill () {
   unsigned char m[2+4], rpill[] = "\x0f\x01\x0d\x00\x00\x00\x00\xc3";
   *((unsigned*)&rpill[3]) = (unsigned)m;
   ((void(*)())&rpill)();
   return (m[5]>0xd0) ? 1 : 0;
}

;)

Full story at: http://invisiblethings.org/index.html#redpill
regards,
joanna.

_______________________________________________
Dailydave mailing list
Dailydavelists.immunitysec.com
https://lists.immunitysec.com/mailman/listinfo/dailydave

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]