Skip to content

Module.enumerateSymbolsSync works perfectly in linux but not giving any output in windows #202

@vishwaraj101

Description

@vishwaraj101

Trying to injection below script in a binary named yolo.exe to get the address of the function lol but unable to get any output.

js = """
// Maximum payload size
var size = 2000;

// Argument for the fuzzed function
var arg = Memory.alloc(size);
var fuzzData = [0x41];
var lolAddr = null;
var lolHandle = null;

// Find the vulnerable function in the target process
// and get a handle to it
Module.enumerateSymbolsSync("yolo").forEach(function(symbol){
switch (symbol.name) {
case "lol":
lolAddr = symbol.address;
// use the function prototype to create a handle
lolHandle = new NativeFunction(ptr(lolAddr), "void", ["pointer"]);
console.log("[i] lol() is at " + lolAddr);
}
});
"""

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions