diff options
| author | jakob <jakob@memeware.net> | 2017-08-30 21:36:20 -0400 |
|---|---|---|
| committer | jakob <jakob@memeware.net> | 2017-08-30 21:36:20 -0400 |
| commit | ea82e4f3f9187fe90c9f9d8c3c3eb6de59d0a63c (patch) | |
| tree | bdcd586a4c875db8dea2c611e99bac19238cb7eb /README.md | |
| parent | ede6bb6dd1002ff259381bd5620a792bd7dcb8b6 (diff) | |
Improved interface for getting a process RTLD
Diffstat (limited to 'README.md')
| -rw-r--r-- | README.md | 5 |
1 files changed, 4 insertions, 1 deletions
@@ -31,7 +31,8 @@ memory is far more complicated than calling mmap(2) on the file. The second iteration also involves injecting code into the inferior process, but instead maps the Linux runtime linker into memory to make use of its existing -GOT/PLT setup functionality. +GOT/PLT setup functionality. This involves injecting auxiliary vectors onto the +stack in an attempt to trick the RTLD. ## Important Resources @@ -40,6 +41,7 @@ GOT/PLT setup functionality. * [Runtime Process Infection][5] * [ELF Program Header][6] * [Dynamic Loader Operation][7] +* [About ELF Auxiliary Vectors][8] [1]: https://github.com/gaffe23/linux-inject @@ -49,3 +51,4 @@ GOT/PLT setup functionality. [5]: http://phrack.org/issues/59/8.html [6]: http://www.sco.com/developers/gabi/latest/ch5.pheader.html [7]: https://sourceware.org/glibc/wiki/DynamicLoader +[8]: http://articles.manugarg.com/aboutelfauxiliaryvectors |