79713503

Date: 2025-07-24 14:08:56
Score: 1
Natty:
Report link

Try using MmCopyVirtualMemory

Works without disabling WP.
Requires a signed driver (Microsoft WHQL-signed or test-signed in Debug mode).

`

NTSTATUS WriteKernelMemory(PVOID TargetAddress, PVOID SourceAddress, SIZE_T Size) {
    SIZE_T BytesWritten;
    return MmCopyVirtualMemory(
        PsGetCurrentProcess(), SourceAddress,
        PsGetCurrentProcess(), TargetAddress,
        Size, KernelMode, &BytesWritten
    );
}

Thank you

Reasons:
  • Blacklisted phrase (0.5): Thank you
  • Has code block (-0.5):
  • Low reputation (1):
Posted by: Fang Guo Ming