2 ms·
How is this done? I think kernels try not to leak the address of system calls at run time, and if they are scattered around in a 64bit address space they are t
by robotresearcher 9y ago
How is this done?
I think kernels try not to leak the address of system calls at run time, and if they are scattered around in a 64bit address space they are tough to search for. Educate me!
- xorcist 9y agoI have no idea, but couldn't you use some part of the software you just compromised that makes syscalls?
- robotresearcher 9y agoThere are no syscalls as the fine article explains.
- robotresearcher 9y agoAh, wait, I mis-read your comment and it's too late to edit mine. Yes, that sounds plausible, and particularly if you have the source code, which you do for many common servers.