View Single Post
  #4  
Old 02-22-2022, 06:07
h4sh3m h4sh3m is online now
Friend
 
Join Date: Aug 2016
Location: RCE
Posts: 56
Rept. Given: 1
Rept. Rcvd 4 Times in 2 Posts
Thanks Given: 49
Thanks Rcvd at 81 Times in 35 Posts
h4sh3m Reputation: 4
Hi

It might happens because :
1- your target is .NET file and your patched file has another copy in GAC folder (mostly dll files in this case)!

2- sometimes when you're patching files (dll files in .NET I mean) and just renaming original files, windows loader keep going to load original file (don't know why) so you just need to change original file's extension of re/move it solve problem.

3- in native files, sometimes you need to disable ASLR and/or relocation flag, also you need to use rva instead va to have better results (needs more steps but its better).

...

xyz- let me know if some parts (or all of them) is not correct


BR,
h4sh3m
Reply With Quote
The Following 2 Users Say Thank You to h4sh3m For This Useful Post:
Doit (02-23-2022), niculaita (02-22-2022)