EmpireProject / Empire

Empire is a PowerShell and Python post-exploitation agent.
http://www.powershellempire.com/
BSD 3-Clause "New" or "Revised" License
7.39k stars 2.81k forks source link

Fixed: using non-local variable. #1314

Open UlrichBerntien opened 5 years ago

UlrichBerntien commented 5 years ago

Bug was invisible because function Invoke-PatchDll is called only once with $RawBytes as $DllBytes parameter. So the local variable $DllBytes and the non-local variable $RawBytes hold the same data.