Menu

PIC handling for dynamic memory cheating

The PIC handling for dynamic memory cheating is now complete. Dynamic memory allocations from within a library can be discovered and hacked now - no matter if the library is loaded early (visible by "ldd") or late during runtime via dlopen(). The only missing part so far is the adaption.

To demo that, the game "Battle Tanks" (btanks) is used. The money value is stored in an object allocated by libbtanks_engine.so which is loaded early. But most interesting objects are allocated by libbt_objects.so which is loaded late. The health is stored in the objects "Launcher", "Shilka" or "Tank" and the player ID check ensures that only the own vehicle becomes indestructible. Also all ammo is handled in objects allocated by libbt_objects.so.

Posted by Sebastian Parschauer 2015-12-28 Labels: ASLR PIC dynamic memory cheating btanks

Log in to post a comment.

Want the latest updates on software, tech news, and AI?
Get latest updates about software, tech news, and AI from SourceForge directly in your inbox once a month.