d_infinite
d_infinite
by the way, if you want to walk over the segment entry list, you have to `ReadPointer(segment + 0x18) - 0x18`, otherwise the address is wrong
and the fix code only work for `x64`
> Very cool. Thanks for that. Do we need to use the xor key to get the size? Can't we just query the base address to get the allocated memory...
@CCob beaconeye use `NtQueryVirtualMemory` to get memory information, and in microsoft doc describe the MEMORY_BASIC_INFORMATION->regionSize` > the region in bytes beginning at the base address in which all pages have...
执行 `findmnt -o TARGET,PROPAGATION /` 看看结果是啥
目前 harbor 插件的适配工作仍在开发中,预计下个月可以用上
目前已支持 `harbor` 的仓库镜像扫描,具体使用可以参考文档 https://veinmind.chaitin.com/docs/mode/scan-registry/#%E4%BD%BF%E7%94%A8%E9%97%AE%E8%84%89-runner-%E6%89%AB%E6%8F%8F%E8%BF%9C%E7%A8%8B%E4%BB%93%E5%BA%93%E9%95%9C%E5%83%8F
这为啥是 fix
如果可以指定的话,是不是也支持选择 clamd 的可执行文件路径,然后我们默认提供一个路径
把针对镜像的修改也放到这个 MR 吧