This question is specific to 64-bit Linux executables.
If I need to override the implementation of a method provided by a shared library, I can use the LD_PRELOAD to specify another library which has my override implementation. But, what about processes that are already running? Using ptrace, I could go as far as loading my library into the target process.
In a controlled environment, in a non-PIE case, I was able to override the GOT entry based on the .plt section entry. But, what about the PIE executables? I'm assuming they would have a .plt section as well as a .plt.sec section? And what are the cases where this won't work?
It looks like Windows offers a Dtrours mechanism to achieve this? Are there any well-known Linux projects that would help me do this?
[link] [comments]
from hacking: security in practice https://ift.tt/d1PGbsO
Comments
Post a Comment