Valdis.Kletnieksvt.edu
Date: Sun May 27 2007 - 20:37:56 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Sun, 27 May 2007 12:15:38 -0000, KaCo678aol.com said:

> If i look into the esp memory to find my 0x90 nop sled the adress where its
> at is 0013f318 but im sure im not able to use a null byte..

The standard solution here is that rather than having 0x0013f318 as the
target address, you do something like this:

        load register,=x'90836388'
        xor register,=x'90909090'
        (code to branch to where that register now points)

Or declare the target address as x'9013f318' and 'xor immediate' a x'90'
into the first byte... or other similar scheme...

-

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001

iD8DBQFGWjJ0cC3lWbTT17ARAmffAKDjDfkLZH6cP6iytWQ8dqqrKYRaGACg8Gjq
oLnfHawMehzpTZx9SyHkRRE=
=o6Xu
-----END PGP SIGNATURE-----

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]