3 ms·

No self modifying code needed, simply embracing pointer arithmetic more than is typically allowed without your sanity being brought into question. This techniq

No self modifying code needed, simply embracing pointer arithmetic more than is typically allowed without your sanity being brought into question. This technique works just fine with no changes to page permissions and W^X.

ant6n 4y ago
Changing and then calling a function pointer stored at some memory address isn’t really insane.
- monocasa 4y ago
  Since it's a jmp rather than a call it's not really a function pointer, but instead a basic block pointer that you're doing arithmetic on.