OSED Practice Questions - OffSec Exploit Developer (OSED) Exam

Why is a pop-pop-ret gadget specifically used for SEH handler takeover?

It pops RAX and RBX Windows places a pointer to the 'next SEH' in a known stack location when calling the handler; pop-pop-ret lands EIP on that pointer It disables DEP It patches cookies

Correct Answer:

Windows places a pointer to the 'next SEH' in a known stack location when calling the handler; pop-pop-ret lands EIP on that pointer

Access more questions from this quiz

Continue to OSED Practice Questions - OffSec Exploit Developer (OSED) Exam for more practice questions and the full quiz experience.

Access More Questions