-
-
[求助]为什么内存不能修改（更改后马上还原）
-
2013-9-23 14:21
-
求助大神：为什么有的内存不能更改（修改后马上还原），这是用的什么技术？是在CPU处拦截的吗？下面标记处不能修改。另外这是CRC的检验代码吗，看着像啊。
0693F6B0 - 80 69 67 FF - sub byte ptr [ecx+67],-01 0693F6B4 - FF - db -01 0693F6B5 - FF - db -01 0693F6B6 - FF - db -01 0693F6B7 - FF 00 - inc [eax] 0693F6B9 - 00 00 - add [eax],al 0693F6BB - 00 B0 F6930690 - add [eax-6FF96C0A],dh 0693F6C1 - F6 93 06000000 - not byte ptr [ebx+00000006] 0693F6C7 - 00 DC - add ah,bl 0693F6C9 - FF 53 F8 - call dword ptr [ebx-08] 0693F6CC - C0 9A 837C6024 80 - rcr byte ptr [edx+24607C83],-80[COLOR="SeaGreen"]//这里无法修改[/COLOR] 0693F6D3 - 7C 00 - jnge 0693F6D5 0693F6D5 - 00 00 - add [eax],al 0693F6D7 - 00 E8 - add al,ch 0693F6D9 - F6 93 067509B0 - not byte ptr [ebx-4FF68AFA] 0693F6DF - 05 E8030000 - add eax,000003E8 0693F6E4 - 00 00 - add [eax],al 0693F6E6 - 00 00 - add [eax],al 0693F6E8 - B4 FF - mov ah,-01 0693F6EA - 93 - xchg eax,ebx 0693F6EB - 06 - push es 0693F6EC - FF 54 DE 04 - call dword ptr [esi+ebx*8+04] 0693F6F0 - E8 030000F8 - call FE93F6F8 0693F6F5 - B1 56 - mov cl,56 0693F6F7 - 05 00000000 - add eax,00000000 0693F6FC - 04 00 - add al,00 0693F6FE - 00 00 - add [eax],al 0693F700 - 00 DC - add ah,bl 0693F702 - F8 - clc 0693F703 - 7F 00 - jg 0693F705 0693F705 - 00 08 - add [eax],cl 0693F707 - 02 28 - add ch,[eax] 0693F709 - F9 - stc 0693F70A - 93 - xchg eax,ebx 0693F70B - 06 - push es 0693F70C - 00 00 - add [eax],al 0693F70E - 08 02 - or [edx],al 0693F710 - 20 F7 - and bh,dh 0693F712 - 93 - xchg eax,ebx 0693F713 - 06 - push es 0693F714 - 00 00 - add [eax],al 0693F716 - 00 00 - add [eax],al 0693F718 - 00 00 - add [eax],al 0693F71A - 00 00 - add [eax],al 0693F71C - 00 00 - add [eax],al 0693F71E - 80 7C 00 00 00 - cmp byte ptr [eax+eax+00],00 0693F723 - 00 18 - add [eax],bl 0693F725 - 00 1A - add [edx],bl 0693F727 - 00 00 - add [eax],al 0693F729 - DCF8 - fdiv st(0),st(0) 0693F72B - 7F 00 - jg 0693F72D 0693F72D - 00 08 - add [eax],cl 0693F72F - 02 50 F9 - add dl,[eax-07] 0693F732 - 93 - xchg eax,ebx 0693F733 - 06 - push es 0693F734 - 00 00 - add [eax],al 0693F736 - 08 02 - or [edx],al 0693F738 - 48 - dec eax 0693F739 - F7 93 06000000 - not [ebx+00000006] 0693F73F - 00 00 - add [eax],al 0693F741 - 00 00 - add [eax],al 0693F743 - 00 00 - add [eax],al 0693F745 - 00 80 7C000000 - add [eax+0000007C],al 0693F74B - 00 00 - add [eax],al
[培训]二进制漏洞攻防（第3期）；满10人开班；模糊测试与工具使用二次开发；网络协议漏洞挖掘；Linux内核漏洞挖掘与利用；AOSP漏洞挖掘与利用；代码审计。
|
|
|---|---|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
