Skip to content
This repository was archived by the owner on Sep 21, 2024. It is now read-only.

Free security descriptor to avoid leak#7

Open
JohnLaTwC wants to merge 1 commit into
base:master
Choose a base branch
from
Open

Free security descriptor to avoid leak #7

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion PPLdump/exploit.cpp
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -780,6 +780,11 @@ BOOL FindFileForTransaction(_In_ DWORD dwMinSize, _Out_ LPWSTR* ppwszFilePath)
bReturnValue = TRUE;
}
}
if (NULL != pSD)
{
LocalFree(pSD);
pSD = NULL;
}
}
}

Expand All@@ -799,7 +804,7 @@ BOOL WritePayloadDllTransacted(_Out_ PHANDLE pdhFile)
{
//
// This implementation was inspired by the DLL Hollowing technique, discussed by @_ForrestOrr
// in this blog post: Masking Malicious Memory Artifacts � Part I: Phantom DLL Hollowing
// in this blog post: Masking Malicious Memory Artifacts – Part I: Phantom DLL Hollowing
// https://www.forrest-orr.net/post/malicious-memory-artifacts-part-i-dll-hollowing
// This trick is awesome! :)
//
Expand Down