Skip to content
This repository has been archived by the owner on Nov 17, 2021. It is now read-only.

Attach exisiting process: find rip in thread context #19

Open
Wenzel opened this issue Sep 9, 2018 · 0 comments
Open

Attach exisiting process: find rip in thread context #19

Wenzel opened this issue Sep 9, 2018 · 0 comments
Labels
Goal Next objective on the project Priority: High

Comments

@Wenzel
Copy link
Owner

Wenzel commented Sep 9, 2018

Currently we attach to a process by listening to CR3 events.

We should enumerate the threads, pick the first one, find the thread context and read the value of rip where the thread is supposed to continue the execution.
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
Goal Next objective on the project Priority: High
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@Wenzel