I was wondering what are all the possible ways people can mess with the executable's .rdata strings ?

Because I've actualy seen it .. But I do not have any idea how they do that.

Some random dude made like a copy of My executable but with more strings (Files Names) on an [x] offset that falls into the .rdata section, which caused the Executable to map more files in the memory ...

How is that even possible ?

  • Woah i guess no one knows .. – 0 x 5 4 4 D Jul 27 '20 at 2:46
  • i think you need to read the section and resize it or change fix size string, then you need to point to the string from your code, in the right location address... – Proxytype Jan 25 at 22:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.