Skip to content

Commit 5be9311

Browse files
committed
fix(post): fix new line
1 parent 4e55f96 commit 5be9311

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

_posts/2025-12-15-Moonwalk-plus-plus.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -270,7 +270,7 @@ clean call stack that mimics legitimate execution flow.
270270

271271
Since we cannot rely on the restore function at this stage—due to the shellcode still being encrypted—and we cannot
272272
simply continue returning through the stack (as frames \( F_1 \) and \( F_2 \) were never intended to be executed upon return),
273-
we need to use a clever, yet simple trick. We will point our desync gadget to a large stack pivot gadget, that will jump
273+
we need to use a clever, yet simple trick. We will point our desync gadget to a large stack pivot gadget, that will jump
274274
over the F frames and land carefully in the conceal area, exactly where we previously place our \( R_D \) chain. This will
275275
allow proper decryption of the shellcode in memory. At this point, we can safely redirect execution to the restore
276276
function, which will reconstruct the original stack state as it was prior to the spoofing sequence.

0 commit comments

Comments
 (0)