Sections are not mapped with the correct page protection

TheWover / donut

Generates x86, x64, or AMD64+x86 position-independent shellcode that loads .NET Assemblies, PE files, and other Windows payloads from memory and runs them with parameters

BSD 3-Clause "New" or "Revised" License

3.53k stars 628 forks source link

Sections are not mapped with the correct page protection #77

Closed Dewera closed 3 years ago

Dewera commented 3 years ago

I noticed that all section pages are mapped with RWX. Whilst this does 'work' for the most part, it would be better to apply the correct protection based on the characteristics of each section. Sections that require PAGE_NOCACHE and WRITECOPY variants would particularly benefit from this.

TheWover commented 3 years ago

Partially resolved in #38 and will be more completely resolved before next version.

TheWover commented 3 years ago

Fully resolved in dev, will be pushed with next version.