diff --git a/README.md b/README.md index 17202d8..69fc423 100644 --- a/README.md +++ b/README.md @@ -8,7 +8,7 @@ A library to manipulate drivers exposing a physical memory read/write primitive to allow the user to call any function in the kernel. There are thousands of drivers exposing physical memory read/write, a bunch are listed in this repo. Currently the project is using gdrv.sys, and is inline hooking NtShutdownSystem. The inline hook is not patchguard friendly, -but is removed after every syscall into NtShutdownSystem to prevent possible detection. +but is removed after every syscall into NtShutdownSystem to prevent possible detection. # Usage