Process hollowing: No hundle exception: System.ArgumentOutOfRangeException

chvancooten / OSEP-Code-Snippets

A repository with my notable code snippets for Offensive Security's PEN-300 (OSEP) course.

1.12k stars 406 forks source link

Process hollowing: No hundle exception: System.ArgumentOutOfRangeException #5

Closed foxhaunt closed 2 years ago

foxhaunt commented 2 years ago

There is a not handle exception System.ArgumentOutOfRangeException:. Index is out of range.

The issue is on the line 169 "uint rva = BitConverter.ToUInt32(dataBuf, (int)rvaOffset);"

Can you take a look when you have a chance please?

chvancooten commented 2 years ago

Hi @foxhaunt, I'm not able to reproduce this issue locally. Could you please provide a bit more information about your environment, build settings, debug info and output? Thanks

foxhaunt commented 2 years ago

Hi @chvancooten , huge thanks for the fast reply. Attached the info requested environmen error debug .

foxhaunt commented 2 years ago

Ok My fault. The issue was in the build settings. It was for "Any CPU". I changed for x64 and It works. Great job. Thank you. And really great job for follina PoC. It has been very usefull for testing IOA rules. Huge thanks.