diff options
| author | Matt Graeber <mattgraeber@gmail.com> | 2013-05-31 18:56:57 -0400 |
|---|---|---|
| committer | Matt Graeber <mattgraeber@gmail.com> | 2013-05-31 18:56:57 -0400 |
| commit | 6e5338c8a34ade0ec0a4704031109fb5187620f8 (patch) | |
| tree | 66cf4219f9ad549b693261e32e1adfbc6c7247d2 | |
| parent | 9b4b3dcc739b684326243d95da1982651bc95d19 (diff) | |
| download | PowerSploit-6e5338c8a34ade0ec0a4704031109fb5187620f8.tar.gz PowerSploit-6e5338c8a34ade0ec0a4704031109fb5187620f8.zip | |
Fixed architecture detection bug in Get-PEB
I was checking processor architecture when I should have been checking
OS architecture.
| -rw-r--r-- | ReverseEngineering/Get-PEB.ps1 | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/ReverseEngineering/Get-PEB.ps1 b/ReverseEngineering/Get-PEB.ps1 index 7f3a2a2..1a196ac 100644 --- a/ReverseEngineering/Get-PEB.ps1 +++ b/ReverseEngineering/Get-PEB.ps1 @@ -174,7 +174,7 @@ http://msdn.microsoft.com/en-us/library/windows/desktop/aa813706(v=vs.85).aspx return
}
- $OSArchitecture = (Get-WmiObject Win32_Processor).DataWidth
+ $OSArchitecture = [Int](Get-WmiObject Win32_OperatingSystem).OSArchitecture.Split('-')[0]
try { $NativeUtils = [NativeUtils] } catch [Management.Automation.RuntimeException] # Only build the assembly if it hasn't already been defined
{
|