Skip to content

btbd/access

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

access - noseh

A simple syscall wrapper that requires no handles to perform operations with PROCESS_ALL_ACCESS privilege.

This branch is the modified version that uses no SEH, but still does safe operations (results in slower execution). This branch also utilizes a different syscall hook for communication via a .data section modification in the kernel.

Usage

  1. Load the driver.
  2. Load the DLL (wrapper) into a program that needs to open a handle to a protected process.
  3. The program can now perform privileged operations without creating a real handle.

Demo

Demo with Fortnite and Cheat Engine

Note

  • The wrapper is designed to be loaded in a x64 process and only implements the syscalls that pertain to my workflow.
  • Only tested on Windows 10 1903, 1809, and 1803.

About

Access without a real handle

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages