mirror of
https://github.com/chmod760/CopyReadProcessMemory
synced 2026-06-06 15:24:30 +00:00
Use pDummyBuffer instead of pNewBuffer
Use pDummyBuffer instead of pNewBuffer to avoid send malware buffer to NtReadProcessMemory because usually this function is hooked by EDRs
This commit is contained in:
@@ -39,7 +39,7 @@ void* CopyReadProcessMemory(char* shellcode, SIZE_T size) {
|
||||
|
||||
ReadProcessMemory(
|
||||
GetCurrentProcess(),
|
||||
pNewBuffer,
|
||||
pDummyBuffer,
|
||||
pDummyBuffer,
|
||||
*((BYTE*)shellcode + I),
|
||||
(SIZE_T*)pDestOffset
|
||||
|
||||
Reference in New Issue
Block a user