update to validate process is started

This commit is contained in:
Teach2Breach
2024-11-26 17:17:42 -06:00
parent 059131db12
commit 35dac7b647
+6 -1
View File
@@ -14,7 +14,7 @@ fn main() {
//let ntdll = get_dll_address("ntdll.dll".to_string(), teb).unwrap();
//set the process name to cmd.exe for testing
let process_name = "cmd.exe".to_string();
let process_name = "RunTimeBroker.exe".to_string();
let process_path = if !process_name.contains('\\') {
format!("C:\\Windows\\System32\\{}", process_name)
@@ -52,6 +52,11 @@ fn main() {
println!("Process ID: {}", pi.dwProcessId);
println!("Thread ID: {}", pi.dwThreadId);
//print msg "Press enter to snapshot the process"
println!("Press enter to snapshot the process");
let mut input = String::new();
std::io::stdin().read_line(&mut input).unwrap();
//take a snapshot of the process
match func::capture_process_snapshot(pi.hProcess) {
Ok(_) => println!("Main function ending - snapshot should be freed here"),