Skip to content

A small proof of concept program that prints the permissions associated with a process handle.

Notifications You must be signed in to change notification settings

NSIDE-ATTACK-LOGIC/Process-Handle-Inspector

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

2 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Process Handle Inspector

This is a small proof of concept program that prints the permissions associated with a process handle.

How It Works

A handle to the target process is opened (currently lsass.exe) via the OpenProcess WinAPI. The obtained handle is then passed to the NtQueryObject API, which returns an objectInfo struct that contains the GrantedAccess field. This field is a bit mask where each bit represnts a permission listed in the official documentation.

About

A small proof of concept program that prints the permissions associated with a process handle.

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages