View Single Post
Old 02-22-2022, 06:07
h4sh3m h4sh3m is offline
Join Date: Aug 2016
Posts: 43
Rept. Given: 0
Rept. Rcvd 4 Times in 2 Posts
Thanks Given: 40
Thanks Rcvd at 76 Times in 31 Posts
h4sh3m Reputation: 4

It might happens because :
1- your target is .NET file and your patched file has another copy in GAC folder (mostly dll files in this case)!

2- sometimes when you're patching files (dll files in .NET I mean) and just renaming original files, windows loader keep going to load original file (don't know why) so you just need to change original file's extension of re/move it solve problem.

3- in native files, sometimes you need to disable ASLR and/or relocation flag, also you need to use rva instead va to have better results (needs more steps but its better).


xyz- let me know if some parts (or all of them) is not correct

Reply With Quote
The Following 2 Users Say Thank You to h4sh3m For This Useful Post:
Doit (02-23-2022), niculaita (02-22-2022)