r/hacking • u/Right_Nuh • 4d ago

Can code injection be countered by randomizing the base address of the stack?

/r/C_Programming/comments/1x871h4/can_code_injection_be_countered_by_randomizing/
6 Upvotes

80% Upvoted

1 comment sorted by

1

u/dstroy0 2d ago

The real answer is it depends the long answer is not unless you are very talented at engineering and your signature is amorphous there is zero chance someone doesn’t map your entire signature. The style of engineering needed to make your function signatures amorphous is necessarily deterministic though so, it’s still detectable as being intentionally amorphous. You need a real entropy source connected to your binary that randomly seeds offsets, in a known to you way.