Gh0st
/
PowerSploit
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Bugfix: Resolving ordinals in remote dll injection 

Thanks to sixdub for finding and fixing a bug when resolving functions
by ordinal in remote processes.
This commit is contained in:
clymb3r 2015-01-07 21:08:58 -08:00
parent dc1a5e519f
commit 90a05de7a6
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CodeExecution/Invoke-ReflectivePEInjection.ps1
View File

@ -33,7 +33,7 @@ Author: Joe Bialek, Twitter: @JosephBialek
License: BSD 3-Clause License: BSD 3-Clause
Required Dependencies: None Required Dependencies: None
Optional Dependencies: None Optional Dependencies: None
Version: 1.2 Version: 1.3
.DESCRIPTION .DESCRIPTION
@ -1547,7 +1547,7 @@ $RemoteScriptBlock = {
{ {
Throw "Unable to allocate memory in the remote process for shellcode" Throw "Unable to allocate memory in the remote process for shellcode"
} }
[UIntPtr]$NumBytesWritten = [UIntPtr]::Zero
$Success = $Win32Functions.WriteProcessMemory.Invoke($RemoteProcHandle, $RSCAddr, $SCPSMemOriginal, [UIntPtr][UInt64]$SCLength, [Ref]$NumBytesWritten) $Success = $Win32Functions.WriteProcessMemory.Invoke($RemoteProcHandle, $RSCAddr, $SCPSMemOriginal, [UIntPtr][UInt64]$SCLength, [Ref]$NumBytesWritten)
if (($Success -eq $false) -or ([UInt64]$NumBytesWritten -ne [UInt64]$SCLength)) if (($Success -eq $false) -or ([UInt64]$NumBytesWritten -ne [UInt64]$SCLength))
{ {