<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/">
  <channel>
    <title>X86-64 on Security Notes</title>
    <link>https://blog.omiilgo.com/tags/x86-64/</link>
    <description>Recent content in X86-64 on Security Notes</description>
    <generator>Hugo</generator>
    <language>en-us</language>
    <lastBuildDate>Thu, 11 Mar 2021 10:00:00 +0800</lastBuildDate>
    <atom:link href="https://blog.omiilgo.com/tags/x86-64/index.xml" rel="self" type="application/rss+xml" />
    <item>
      <title>Recovering a C&#43;&#43; Vtable From ARM64/x64 Disassembly</title>
      <link>https://blog.omiilgo.com/posts/cpp-vtable-recovery-from-disassembly/</link>
      <pubDate>Thu, 11 Mar 2021 10:00:00 +0800</pubDate>
      <guid>https://blog.omiilgo.com/posts/cpp-vtable-recovery-from-disassembly/</guid>
      <description>Two-class toy hierarchy, virtual dtor plus two methods. objdump/readelf of the compiler vtable, ctor writing the vptr, virtual call through [x0,#16], gdb print of the slot.</description>
    </item>
    <item>
      <title>ROP vs ret2libc: Classifying `ret` Sites on a Toy Binary</title>
      <link>https://blog.omiilgo.com/posts/rop-versus-ret2libc-mental-model/</link>
      <pubDate>Tue, 09 Feb 2021 14:00:00 +0800</pubDate>
      <guid>https://blog.omiilgo.com/posts/rop-versus-ret2libc-mental-model/</guid>
      <description>Mental model plus objdump of a toy: ret2libc is whole-function reuse, ROP is fragment reuse. Classify epilogue rets vs pop;ret vs leave;ret. Overflow crash with RIP=0x4141… — no system(&amp;quot;/bin/sh&amp;quot;) chain.</description>
    </item>
  </channel>
</rss>
