From c1b026ef3ef754fad6e663a04503257932d34a12 Mon Sep 17 00:00:00 2001 From: mgeeky Date: Thu, 7 Oct 2021 16:32:27 +0200 Subject: [PATCH] generalised isBeaconThread condition. --- ShellcodeFluctuation/main.cpp | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/ShellcodeFluctuation/main.cpp b/ShellcodeFluctuation/main.cpp index eb2ae82..c9a440d 100644 --- a/ShellcodeFluctuation/main.cpp +++ b/ShellcodeFluctuation/main.cpp @@ -166,7 +166,8 @@ bool isShellcodeThread(LPVOID address) { const DWORD expectedProtection = (g_fluctuate == FluctuateToRW) ? PAGE_READWRITE : PAGE_NOACCESS; - return ((mbi.Protect & Shellcode_Memory_Protection) + return ((mbi.Protect & PAGE_EXECUTE_READ) + || (mbi.Protect & PAGE_EXECUTE_READWRITE) || (mbi.Protect & expectedProtection)); } }