Class RopChainGenerator64
Attempts to create Rop chains from 64 bit processes.
Inheritance
System.Object
RopChainGenerator64
Inherited Members
System.Object.ToString()
System.Object.Equals(System.Object)
System.Object.Equals(System.Object, System.Object)
System.Object.ReferenceEquals(System.Object, System.Object)
System.Object.GetHashCode()
System.Object.GetType()
System.Object.MemberwiseClone()
Namespace: ERC.Utilities
Assembly: ERC.Net.dll
Syntax
public class RopChainGenerator64Constructors
RopChainGenerator64(ProcessInfo)
Constructor
Declaration
public RopChainGenerator64(ProcessInfo _info)Parameters
| Type | Name | Description |
|---|---|---|
| ProcessInfo | _info | ProcessInfo object for which a ROP chain will be generated |
Fields
VirtualAllocChain
Contains a ROP chain which calls the VirtualAlloc method.
Declaration
public List<Tuple<byte[], string>> VirtualAllocChainField Value
| Type | Description |
|---|---|
| System.Collections.Generic.List<System.Tuple<System.Byte[], System.String>> |
Methods
GenerateRopChain64(Byte[], Byte[], List<String>)
Creates a RopChain for a specific process.
Declaration
public ErcResult<string> GenerateRopChain64(byte[] ptrsToExclude, byte[] startAddress = null, List<string> excludes = null)Parameters
| Type | Name | Description |
|---|---|---|
| System.Byte[] | ptrsToExclude | Takes a byte array of values used to disqualify ROP gadgets |
| System.Byte[] | startAddress | A Address to be used as the start location for which memory will be made executable |
| System.Collections.Generic.List<System.String> | excludes | A list of modules to be excluded from the search for ROP gadgets |
Returns
| Type | Description |
|---|---|
| ErcResult<System.String> | Returns an ErcResult string containing |
GenerateRopChain64(Byte[], List<String>)
Creates a RopChain for a specific process.
Declaration
public ErcResult<string> GenerateRopChain64(byte[] startAddress = null, List<string> excludes = null)Parameters
| Type | Name | Description |
|---|---|---|
| System.Byte[] | startAddress | A Address to be used as the start location for which memory will be made executable |
| System.Collections.Generic.List<System.String> | excludes | A list of modules to be excluded from the search for ROP gadgets |
Returns
| Type | Description |
|---|---|
| ErcResult<System.String> | Returns an ErcResult string containing |