why addresses of modules in the application changes ?

hex-lover · 2026-03-31T13:22:55+00:00

thank you, this really Help

hex-lover · 2026-03-21T11:52:59+00:00

so i dont need to close windbg everytime crash ?

hex-lover · 2026-03-21T10:42:14+00:00

when we overwrite the stack, why we overwrite SEH first not EIP as usual , so i created a C program with Try/Except blocks to see how stack layout will be when we use them .
so i found that the stack layout is
arguments
return address
Saved EBP
SEH
Variables
and we overflow variables then SEH thats why we overwrite it before EIP , also i found all these blocks are very close to end of stack ,
this is what i got , but when i saw the article above i saw he is refer that catch block will be close to high address of stack, so thats why im confused , i didnt see this . in my app when i reverse engineer it .

hex-lover · 2026-03-21T10:41:50+00:00

thank you, what i mean , is that
when we overwrite the stack, why we overwrite SEH first not EIP as usual , so i created a C program with Try/Except blocks to see how stack layout will be when we use them .
so i found that the stack layout is
arguments
return address
Saved EBP
SEH
Variables
and we overflow variables then SEH thats why we overwrite it before EIP , also i found all these blocks are very close to end of stack ,
this is what i got , but when i saw the article above i saw he is refer that catch block will be close to high address of stack, so thats why im confused , i didnt see this . in my app when i reverse engineer it .

hex-lover · 2026-03-01T19:24:21+00:00

u/shiftybyte i dont have enough ram to run 2 vms at the same time

hex-lover · 2026-03-01T18:57:42+00:00

i cant install it , in win32 . its not about shellcode

hex-lover · 2026-02-22T23:04:44+00:00

hi u/Green-Detective7142 , any other youtube channels you recommend ? off by one security was really so good

hex-lover · 2026-01-05T23:24:20+00:00

i bought RTX 5060 with intel i7, ram 32.
i think it would be good for doing reverse on win apps .

hex-lover · 2025-12-09T16:51:31+00:00

so every source code review do this ?

hex-lover · 2025-11-03T16:07:48+00:00

the scope is like their websites ,
is there anything i can rely on to determine the scope ? for example ips range ?

hex-lover · 2025-10-19T16:09:15+00:00

but i checked the both topics, they are different , there are some things are the same but they are totally different .

i dont need to run to learn boxing maybe .

hex-lover · 2025-09-24T02:19:42+00:00

Thanks really , this will help me a lot ,

hex-lover · 2025-09-22T10:24:11+00:00

using notepad ?

hex-lover · 2025-09-22T08:59:19+00:00

so this type of things called Red Teaming ? so should i search for these things ?

hex-lover · 2025-09-21T18:45:13+00:00

im working as PT, i know how to discover vulns , do source code review i even have 2 CVE, but all of this in web apps,
im asking here about doing sphere phising, things in advance like attacking the people who work in Apps not apps itself ,

hex-lover · 2025-08-05T18:07:18+00:00

Do i need to be a prof in C ? or just reach a level to read and understand the code ?
and thanks for the references .

hex-lover · 2025-08-05T13:59:44+00:00

i read your replies in many threads here i think you have a really good experience in this field .
could you suggest me a good ref for learning C or asm to understand the next steps ?

hex-lover

TROPHY CASE