Added a slight delay to Invoke-DllInjection validation

In some cases, the loaded module would show up as loaded after the check
occurred.
This commit is contained in:
Matt Graeber
2015-12-16 14:48:09 -08:00
parent f5d9b25275
commit 1cdad586c8
+4 -2
View File
@@ -313,9 +313,11 @@ http://www.exploit-monday.com
# Close process handle
$CloseHandle.Invoke($hProcess) | Out-Null
Start-Sleep -Seconds 2
# Extract just the filename from the provided path to the dll.
$FileName = Split-Path $Dll -Leaf
$DllInfo = (Get-Process -Id $ProcessID).Modules | ? { $_.FileName.Contains($FileName) }
$FileName = (Split-Path $Dll -Leaf).ToLower()
$DllInfo = (Get-Process -Id $ProcessID).Modules | ? { $_.FileName.ToLower().Contains($FileName) }
if (!$DllInfo)
{