Skip to content

POC of a better implementation of GetProcAddress for ntdll using binary search

Notifications You must be signed in to change notification settings

LittlePony/BetterGetProcAddress

 
 

Repository files navigation

resolve syscalls variant

BetterGetProcAddress

POC of a better/faster implementation of GetProcAddress using binary search, see the benchmark directory for more info about speed

note that I'm using mingw-gcc, if that's not the case for you, you might need to provide some struct declarations such as the PEB, instead of including winternl.h

also shoutout to hyper and base64

writeup explaining how this works : coming soon

About

POC of a better implementation of GetProcAddress for ntdll using binary search

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • C 100.0%