c#读取vc虚表指针方法

原创于 2025-05-09 15:41:16 发布 · 154 阅读

0 ·

CC 4.0 BY-SA版权

始于C#，精于C&C++，醉心于Windows内核与Com组件安全研究

文章标签：

#c# #开发语言

windows 专栏收录该内容

186 篇文章

订阅专栏

     PropertyInfo m_session_ptr = session.GetType().GetProperty("m_session_ptr", BindingFlags.Instance | BindingFlags.NonPublic);

            object m_session_ptr_obj = m_session_ptr.GetValue(session);
            IntPtr m_session_ptr_val = new IntPtr(System.Reflection.Pointer.Unbox(m_session_ptr_obj));
            Console.WriteLine(m_session_ptr_obj + ",m_session_ptr_val:=>" + m_session_ptr_val.ToString("x"));
            IntPtr m_session_vftbl = Marshal.ReadIntPtr(m_session_ptr_val);
            IntPtr ReadObjectFunc = Marshal.ReadIntPtr(m_session_vftbl, 1768);
            Console.WriteLine("ReadObjectFunc:=>" + ReadObjectFunc.ToString("x"));