News for hackers. Stuff that matters.

A comment on Hotpatching a C Function on x86. Parent comment

Re:Hotpatching a C Function on x86 by chatmasta on Friday April 01, 2016 @11:15AM (#11405378)
If you are able to recompile the program, you can disable ASLR. For example on iOS it just requires a change to the MACH-O header of the binary. [0]

But I doubt you could disable ASLR of a running process, for somewhat obvious reasons...

[0] https://github.com/peterfillmore/removePIE

[ Parent | on HN ]
Re:Hotpatching a C Function on x86 by dreamlayers on Friday April 01, 2016 @11:46AM (#11405674)
You can similarly disable ASLR via the header in Windows, though there are ways to override that.

ASLR shouldn't be a big problem though. Only the base address of code in each file (executable or library) is changed, and you can easily find it. Functions within one file are not shuffled around. ASLR only exists to stop you from hard-coding function addresses, to make exploits harder.

[ Parent | on HN ]