flat assembler
Message board for the users of flat assembler.
Index
> High Level Languages > How to edit memory of usermode program from driver?(windows) |
Author |
|
DOS386 18 Jun 2013, 00:37
> know that chars can be noncontinuous if we look from physical memory
Minimal page size is 4 KiB so your 12 Byte's at VA $0000'F000 (???) will be continuous. > how to convert virtual address to physical ? Find out what value (physical address) the victim app has in CR3. Please send me your virus when it's done (encrypt it well otherwise I won't be able to get it). |
|||
18 Jun 2013, 00:37 |
|
typedef 18 Jun 2013, 04:06
The best way is always to use another app/dll that talks (IO) to the driver.
|
|||
18 Jun 2013, 04:06 |
|
< Last Thread | Next Thread > |
Forum Rules:
|
Copyright © 1999-2025, Tomasz Grysztar. Also on GitHub, YouTube.
Website powered by rwasa.