pwn::System::ObjectManager Class Reference

Static Public Member Functions
static Result< std::vector< std::pair< std::wstring, std::wstring > > >	EnumerateDirectory (std::wstring_view const &Root)
static Result< std::vector< uptr > >	FindBigPoolAddressesFromTag (const u32 Tag)
	Get a vector of big pool chunks with the specified Tag. More...

Member Function Documentation

EnumerateDirectory()

static Result<std::vector<std::pair<std::wstring, std::wstring> > > pwn::System::ObjectManager::EnumerateDirectory ( std::wstring_view const &  Root )

static

Parameters

Root

Returns

Result<std::vector<std::pair<std::wstring, std::wstring>>>

FindBigPoolAddressesFromTag()

static Result<std::vector<uptr> > pwn::System::ObjectManager::FindBigPoolAddressesFromTag ( const u32  Tag )

static

Get a vector of big pool chunks with the specified Tag.

Parameters

Tag	is a u32 of the big pool tag to search for. If 0, all big pool chunks are returned.

Returns

Result<std::vector<uptr>> A vector with the big pool kernel address with the specified tag

Note

This function is just a helper for System::Query(SystemBigPoolInformation) https://blahcat.github.io/posts/2019/03/17/small-dumps-in-the-big-pool.html

---

The documentation for this class was generated from the following file:

• /home/runner/work/pwn--/pwn--/Modules/System/Include/Win32/ObjectManager.hpp