mirror of
https://github.com/PowerShellMafia/PowerSploit
synced 2026-06-08 12:13:33 +00:00
Added a slight delay to Invoke-DllInjection validation
In some cases, the loaded module would show up as loaded after the check occurred.
This commit is contained in:
@@ -313,9 +313,11 @@ http://www.exploit-monday.com
|
||||
# Close process handle
|
||||
$CloseHandle.Invoke($hProcess) | Out-Null
|
||||
|
||||
Start-Sleep -Seconds 2
|
||||
|
||||
# Extract just the filename from the provided path to the dll.
|
||||
$FileName = Split-Path $Dll -Leaf
|
||||
$DllInfo = (Get-Process -Id $ProcessID).Modules | ? { $_.FileName.Contains($FileName) }
|
||||
$FileName = (Split-Path $Dll -Leaf).ToLower()
|
||||
$DllInfo = (Get-Process -Id $ProcessID).Modules | ? { $_.FileName.ToLower().Contains($FileName) }
|
||||
|
||||
if (!$DllInfo)
|
||||
{
|
||||
|
||||
Reference in New Issue
Block a user