breakingmalwareresearch / cfgexceptions Goto Github PK

View Code? Open in Web Editor NEW

57.0 57.0 11.0 14 KB

Adding exceptions to Microsoft's Control Flow Guard (CFG)

Home Page: https://breakingmalware.com/documentation/documenting-undocumented-adding-control-flow-guard-exceptions/

C++ 100.00%

cfgexceptions's People

Contributors

Stargazers

Watchers

Forkers

h0wl deki0r techlord-rce bypasscc own2pwn voraka yehgdotnet gavz fengjixuchui codingman 11philip22 gmh5225

cfgexceptions's Issues

NtSetInformationVirtualMemory returns with ntstatus 0xC00000F4 (STATUS_INVALID_PARAMETER_6)

Hi, When running your code it fails on calling NtSetInformationVirtualMemory it returns with ntstatus 0xC00000F4 which means parameters 6 is invalid. Which is the lenght of VmInformation according to this: https://processhacker.sourceforge.io/doc/ntmmapi_8h.html#acca2104ed60d4521b444d8cd6ff40ce4. I tried replacing it with 0x20 because sizeof shows that VmInformation is 32 bytes long. But it didnt help and i got the same results. Any idea how to fix this?

VM_INFORMATION struct

I recommend you take a look at RtlpGuardGrantSuppressedCallAccess inside the 64 bit ntdll.dll, it indicates that your struct is incorrect. It should be 24 bytes for 64 bit.

Recommend Projects