dillstead

4 ms·

1. 1.▲
   by dillstead 1y ago

   I wouldn't be surprised if this gets flagged but I haven't tried it.
2. 2.▲
   by dillstead 1y ago

   You're right, you definitely can strip away the section headers. Notice that there's always a dynamic segment? If there wasn't, stripping away the section headers would make it very difficult to locate this very important p
3. 3.▲
   by dillstead 1y ago

   Good point! I was aware that there are certain circumstances in which argv[0] might not contain the path to the executable but I didn't bother to look for an alternative. When I get a chance, I'll incorporate your suggestion. Th
4. 4.▲
   by dillstead 1y ago

   Yes, I've implemented this technique before at my job. Relocating assembly instructions especially those that contain branching logic can be tricky as the offsets have to be recomputed or a new instruction needs to be used instead. M
5. 5.▲
   by dillstead 1y ago

   I wrote the project entirely for fun, as a learning experience and because of that I have not extensively tested it. At the moment only ELF files of type ET_EXEC can be injected. I was careful to only inject the thunk (the code that loads
6. 6.▲
   Show HN: ELF Injector(github.com)

   39 points by dillstead 1y ago|13 comments