Update 2024-11-26-segrun.md

scavengersecurity · Nov 26, 2024 · b44c527 · b44c527
1 parent d223f58
commit b44c527
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/_posts/2024-11-26-segrun/2024-11-26-segrun.md b/_posts/2024-11-26-segrun/2024-11-26-segrun.md
@@ -157,15 +157,15 @@ Here’s how the program operates once the exception handler is set up, the EDR
 
 ![](segrun1.png)
 
-1. Hooked Function Execution: When a hooked function is called, the trampoline executes, redirecting the execution flow to the EDR DLL:
+- Hooked Function Execution: When a hooked function is called, the trampoline executes, redirecting the execution flow to the EDR DLL:
 
 ![](segrun2.png)
 
-2. Triggered Exception: An exception is raised as this memory region is marked as non-executable:
+- Triggered Exception: An exception is raised as this memory region is marked as non-executable:
 
 ![](segrun3.png)
 
-3. Exception Handling and ROP: The exception handler manages the exception and performs the necessary ROP to the ret gadget. This process is repeated as many times as needed until the program successfully completes the call to the hooked function.
+- Exception Handling and ROP: The exception handler manages the exception and performs the necessary ROP to the ret gadget. This process is repeated as many times as needed until the program successfully completes the call to the hooked function.
 
 ![](segrun4.png)