From arkon at ragestorm.net  Wed Nov 25 19:46:09 2009
From: arkon at ragestorm.net (Gil Dabah)
Date: Wed, 25 Nov 2009 21:46:09 +0200
Subject: [Code-Crunchers] x64 Trampolines
Message-ID: <4B0D8981.6060300@ragestorm.net>

Hey

I was wondering if anyone has a good trampoline in Assembly for x64.
5 bytes (0xe9 + addr) used to be enough on 32 bits platforms, but it's
not the case anymore on x64.

Dabah


From arkon at ragestorm.net  Thu Nov 26 19:36:04 2009
From: arkon at ragestorm.net (Gil Dabah)
Date: Thu, 26 Nov 2009 21:36:04 +0200
Subject: [Code-Crunchers] x64 Trampolines
In-Reply-To: <20091126112612.105961crm2wapfwo@webmail.intermedia.net>
References: <4B0D8981.6060300@ragestorm.net>
	<20091126112612.105961crm2wapfwo@webmail.intermedia.net>
Message-ID: <4B0ED8A4.4070903@ragestorm.net>

I wrote it. :P
Looking for more ways.

jason at malwareanalysis.com wrote:
> http://www.ragestorm.net/blogs/?p=107
> 
> Quoting Gil Dabah <arkon at ragestorm.net>:
> 
>> Hey
>>
>> I was wondering if anyone has a good trampoline in Assembly for x64.
>> 5 bytes (0xe9 + addr) used to be enough on 32 bits platforms, but it's
>> not the case anymore on x64.
>>
>> Dabah
>>
>> _______________________________________________
>> Code-Crunchers mailing list
>> Code-Crunchers at whitestar.linuxbox.org
>> http://whitestar.linuxbox.org/mailman/listinfo/code-crunchers
>>
> 
> 
> 
> 

From jason at malwareanalysis.com  Thu Nov 26 19:26:12 2009
From: jason at malwareanalysis.com (jason at malwareanalysis.com)
Date: Thu, 26 Nov 2009 11:26:12 -0800
Subject: [Code-Crunchers] x64 Trampolines
In-Reply-To: <4B0D8981.6060300@ragestorm.net>
References: <4B0D8981.6060300@ragestorm.net>
Message-ID: <20091126112612.105961crm2wapfwo@webmail.intermedia.net>

http://www.ragestorm.net/blogs/?p=107

Quoting Gil Dabah <arkon at ragestorm.net>:

> Hey
>
> I was wondering if anyone has a good trampoline in Assembly for x64.
> 5 bytes (0xe9 + addr) used to be enough on 32 bits platforms, but it's
> not the case anymore on x64.
>
> Dabah
>
> _______________________________________________
> Code-Crunchers mailing list
> Code-Crunchers at whitestar.linuxbox.org
> http://whitestar.linuxbox.org/mailman/listinfo/code-crunchers
>




From jason at malwareanalysis.com  Fri Nov 27 04:00:56 2009
From: jason at malwareanalysis.com (jason at malwareanalysis.com)
Date: Thu, 26 Nov 2009 20:00:56 -0800
Subject: [Code-Crunchers] x64 Trampolines
In-Reply-To: <4B0ED8A4.4070903@ragestorm.net>
References: <4B0D8981.6060300@ragestorm.net>
	<20091126112612.105961crm2wapfwo@webmail.intermedia.net>
	<4B0ED8A4.4070903@ragestorm.net>
Message-ID: <20091126200056.1399322javc1yr6s@webmail.intermedia.net>

I thought your name sounded familiar :P

Sorry dude, I've got nothing shorter or simpler than what you've  
already posted.

- Jason

Quoting Gil Dabah <arkon at ragestorm.net>:

> I wrote it. :P
> Looking for more ways.
>
> jason at malwareanalysis.com wrote:
>> http://www.ragestorm.net/blogs/?p=107
>>
>> Quoting Gil Dabah <arkon at ragestorm.net>:
>>
>>> Hey
>>>
>>> I was wondering if anyone has a good trampoline in Assembly for x64.
>>> 5 bytes (0xe9 + addr) used to be enough on 32 bits platforms, but it's
>>> not the case anymore on x64.
>>>
>>> Dabah
>>>
>>> _______________________________________________
>>> Code-Crunchers mailing list
>>> Code-Crunchers at whitestar.linuxbox.org
>>> http://whitestar.linuxbox.org/mailman/listinfo/code-crunchers
>>>
>>
>>
>>
>>
>