参考windows的seh机制实现linux下的异常处理

最新推荐文章于 2023-12-08 15:00:56 发布

原创

最新推荐文章于 2023-12-08 15:00:56 发布 · 728 阅读

0 ·

CC 4.0 BY-SA版权

本文通过分析Windows Media Player中的SEH（结构化异常处理）机制，探讨了如何在Linux环境下实现类似的异常处理。作者展示了如何在Immunity Debugger中查看SEH链，并讨论了利用SEH构造可靠exploit的方法。示例中，作者使用了一个简单的C程序，展示了在Linux中如何处理异常，以达到类似Windows SEH的效果。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

http://www.securitysift.com/windows-exploit-development-part-6-seh-exploits/

SEH Example

Let’s take a look at how SEH is implemented in practice, using Windows Media Player as an example. Recall from Part 1 of this exploit series that you can view the contents of the TEB using the !teb command in WinDbg. Here is a snapshot of the running process threads and a look at one of the associated TEBs for Windows Media Player (on a Win XP SP3 machine):

Notice the ExceptionList address. This is the address of the start of the SEH chain for that thread (yours may vary). In other words, this address points to