advanced memory protection bypasses, part 2: bypassing DEP

tl;dr in part 1 , i talked about bypassing ASLR via information leaks. this time, we&rsquo;ll try to bypass DEP (Data Execution Prevention) using a very specific method: leveraging WriteProcessMemory to copy shellcode into an already-executable region. this post breaks down the internals of a Windows exploitation technique that leverages WriteProcessMemory and PE section manipulation to bypass…