Skip to content

Commit 569d7a2

Browse files
author
Josh Lospinoso
committed
Better message box
1 parent 148aa18 commit 569d7a2

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

README.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ auto use_mshtml{ true };
2727
auto gadget_memory = get_gadget(use_mshtml, gadget_pic_path);
2828
```
2929
30-
Every 5 seconds, gargoyle will pop up an empty message box then unmark itself executable. For fun, use [Sysinternals's excellent VMMap tool](https://technet.microsoft.com/en-us/sysinternals/vmmap.aspx) to examine when *gargoyle*'s PIC is executable. If a message box is active, *gargoyle* will be executable. If it is not, *gargoyle* should not be executable. The PIC's address is printed to `stdout` just before the harness calls into the PIC.
30+
Every 15 seconds, gargoyle will pop up a message box. When you click ok, gargoyle sets up the tail calls to mark itself non-executable and to wait for the timer. For fun, use [Sysinternals's excellent VMMap tool](https://technet.microsoft.com/en-us/sysinternals/vmmap.aspx) to examine when *gargoyle*'s PIC is executable. If a message box is active, *gargoyle* will be executable. If it is not, *gargoyle* should not be executable. The PIC's address is printed to `stdout` just before the harness calls into the PIC.
3131
3232
# More information
3333
Blog post coming soon at [lospi.net](https://jlospinoso.github.io/).

main.cpp

+1-1
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ using namespace std;
88

99
namespace {
1010
typedef void(*callable)(void*);
11-
constexpr DWORD invocation_interval_ms = 5 * 1000;
11+
constexpr DWORD invocation_interval_ms = 15 * 1000;
1212
constexpr size_t stack_size = 0x10000;
1313

1414
struct SetupConfiguration {

0 commit comments

Comments
 (0)