绕过ZwOpenProcess
修改ntdll!ZwOpenProcess 调用号,add ssdt
跨进程邪恶
傀儡进程的EPROCESS.Pcb.DirectoryTableBase[0] EPROCESS.Pcb.DirectoryTableBase[1]修改为目标进程
绕过ZwOpenProcess
修改ntdll!ZwOpenProcess 调用号,add ssdt
跨进程邪恶
傀儡进程的EPROCESS.Pcb.DirectoryTableBase[0] EPROCESS.Pcb.DirectoryTableBase[1]修改为目标进程