Skip to content

EBalloon/Rw-No-Attach

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

40 Commits
 
 
 
 
 
 

Repository files navigation

OK, let's go. I did it in less than a day because I was bored. The code isn't perfect, but it does the job!

This replaces KeAttachProcess/KeStackAttachProcess

Example:

Status = ReadProcessMemory(ProcessPid, Address, &Buffer, Size);
if (NT_SUCCESS(Status) && Buffer)
    Printf("Value: %llu\n", Buffer);

Tested on Windows 10 2004 - 20H1

About

No description, website, or topics provided.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages