Skip to content

Repository files navigation

Handle hijacking

actual handle hijacking without duplicating the handle, just enumerates the handles already open by the parent process and takes the one that has PROCESS_ALL_ACCESS to the target

target process is hardcoded in dllmain.cpp:

HANDLE handle = GetHandle(L"cs2.exe");

requirements

  • Windows 11 25H2 (handle type index is hardcoded to 8, may differ on older versions)
  • phnt - i used vcpkg
  • MSVC

credits

based on paskalian/HandleHijacking

preview

About

handle hijacking without duplicating the handle

Topics

Resources

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages