Read Process Memory with ReadProcessMemory Windows API

Pentester Academy is the world’s leading online cyber security education platform. We offer:

FOLLOW US ON:

Note: All our materials are strictly meant for educational purposes.

[MrLinusK]

#include <windows.h>
#include <iostream>
#include <stdlib.h>
#include <stdio.h>

int main() {


DWORD pid = 5132;
LONGLONG addr = // Replace this with the actual address you want to read
CHAR buffer[100]; // Adjust the size as needed
SIZE_T bytesRead;


HANDLE victimProcess = OpenProcess(PROCESS_VM_READ, false, pid);

memset(buffer, 0x0, 100);

ReadProcessMemory(victimProcess, (LPCVOID)addr, (LPVOID)buffer, 95, &bytesRead);

printf("Value: %hs", buffer);

while(true){continue;}

return 0;
}

I made this but it is not displaing annyting?

[jackermichaelson]

Hey Vivek.

What's the difference between ReadProcessMemory and Toolhelp32ReadProcessMemory, i noticed that one requires a handle and another requires the process ID. Is it possible to use Toolhelp32ReadProcessMemory to read memory from a process protected by the obRegisterCallbacks routine since it stops user-mode process from opening a handle to the designated process?.