search

Maff1t / WindowsPermsPoC

A simple PoC to demonstrate that is possible to write Non writable memory and execute Non executable memory on Windows
52 stars 9 forks source link

it not work after change DEP to NO #1

Closed FunnyWolf closed 3 years ago

FunnyWolf commented 3 years ago

It's still not work after I modify the DEP to NO,but if i change "PAGE_READONLY" to "PAGE_EXECUTE",all is just good. (i did not change DEP flag of os,test in windows10)

Maff1t commented 3 years ago

How did you set dep? I tested only at compilation time, compiling with visual studio

FunnyWolf commented 3 years ago

In visual studio 2019 ,Project→project Properties→Configuration Properties→Linker→Advanced→Data Execution Prevention (DEP) -> (/NXCOMPAT:NO)

Maff1t commented 3 years ago

Ok interesting, I did the same on my Windows 10 machine, and it works. Can you please give me the exact version of your OS? And, can you inspect manually the PE Header to see if the DEP of the binary is correctly set to "false". There is a specific field inside the PE optional header

FunnyWolf commented 3 years ago

Ok interesting, I did the same on my Windows 10 machine, and it works. Can you please give me the exact version of your OS? And, can you inspect manually the PE Header to see if the DEP of the binary is correctly set to "false". There is a specific field inside the PE optional header

hi maff1t, I test it again, it works with build option "Release x86" and x86 shellcode(calc.exe),but not work with build option "Release x64" and x64 shellcode(calc.exe)