Get PEB of other process without injection

This commit is contained in:
Clement Rouault
2015-12-11 09:53:13 +01:00
parent 419e65324f
commit 46d0a45e17
9 changed files with 880 additions and 55 deletions
-1
View File
@@ -30,7 +30,6 @@ def get_remote_func_addr(target, dll_name, func_name):
def is_wow_64(hProcess):
import ipdb;ipdb.set_trace()
try:
fnIsWow64Process = get_func_addr("kernel32.dll", "IsWow64Process")
except winproxy.Kernel32Error: