René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"System.OverflowException","articleBody":"**Atom Bombing Technique**\r\n\r\nSometimes this line throws an overflow exception:\r\n```csharp\r\nNtQueueApcThread(hThread, pVirtualProtect, (UInt32)codeCave, (IntPtr)shellcode.Length, (Int32)(MemoryProtection.PAGE_EXECUTE_READWRITE));\r\n```\r\n\r\nThe original technique uses ROP chains to call `VirtualProtect`, as I am only passing the first three parameters to `VirtualProtect` using the `NtQueueApcThread` the stack may be corrupt. Needs further investigation.\r\n\r\n```\r\n**Message**\r\n\"Arithmetic operation resulted in an overflow.\"\tstring\r\n\r\n**Source**\r\n\"mscorlib\"\r\n\r\n**StackTrace**\r\n\"at System.IntPtr.op_Explicit(IntPtr value)\\r\\n   at ShellcodeInjectionTechniques.AtomBomb.Run(Process target, Byte[] shellcode) in C:\\\\Users\\\\John\\\\source\\\\repos\\\\ShellcodeInjectionTechniques\\\\ShellcodeInjectionTechniques\\\\Techniques\\\\AtomBomb.cs:line 110\\r\\n   at ShellcodeInjectionTechniques.Program.Main(String[] args) in C:\\\\Users\\\\John\\\\source\\\\repos\\\\ShellcodeInjectionTechniques\\\\ShellcodeInjectionTechniques\\\\Program.cs:line 43\"\r\n```\r\n\r\n","author":{"url":"https://github.com/plackyhacker","@type":"Person","name":"plackyhacker"},"datePublished":"2021-10-22T19:36:59.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/6/Shellcode-Injection-Techniques/issues/6"}