Image

Investigaciones

[Shellcode development] Resolve function address using IAT instead of EAT - Part 1

¡Hola, lectores!

Hoy os ofrecemos un post que seguro que encontraréis muy interesante y de utilidad.

Y es que, en este artículo vamos a revisar las diferentes estructuras que existen en un fichero PE. En concreto, aquellas que se encargan de especificar qué funciones han de ser importadas una vez este fichero sea ejecutado, y también aquellas que se encargan de especificar qué funciones exporta una DLL.

[Shellcode development] Resolve function address using IAT instead of EAT - Part 1 (EN)

Hello, readers!

Today we offer you a post that we are sure you will find very interesting and useful.

In this article, we are going to review the different structures that exist in a PE file. Specifically, those that are in charge of specifying which functions are to be imported once this file is executed. imported once this file is executed, and also those that are in charge of specifying which functions a DLL exports. to specify which functions a DLL exports.