Skip to content

blnchdev/Wraith

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

7 Commits
 
 
 
 

Repository files navigation

Wraith

A handle hijacking implementation for a given process, using Aether as the dynamic direct syscall wrapper.
There's no practical need to use direct syscalls in your own process for handle hijacking, but it was a good exercise to show actual use of Aether This implementation uses std::optional because I think it's underappreciated!

Showcase

Example Implementation

Notes

This is for educational purposes only. Handle hijacking is typically either blocked or detected by EDRs and kernel-mode anti-cheat solutions, so this technique has limited real-world applicability.

Credits

NtDoc for NtAPI Definitions

About

Handle Hijacker using Dynamic Direct Syscall Wrapper for Windows

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

 
 
 

Contributors

Languages