PPLwindow

KO | EN

gitlite — search

#javascript #hacktoberfest #ai #llm #golang #go #android #deep-learning #linux #windows #cli #kubernetes #vue #mcp

(★ 54)

PPLwindow PPL Bypass via GetProcessHandleFromHwnd

파일 탐색기

최종 버전 다운로드 (.zip)

- OpLock.c
- OpLock.h
- PPLwindow.c
- PPLwindow.vcxproj
- PPLwindow.vcxproj.filters
.gitignore
pplwindow.png
PPLwindow.slnx
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# PPLwindow

PPLwindow is a Proof-of-Concept for a PPL Bypass that affects Windows 10 1809 to Windows 11 23H2. The NtUserGetWindowProcessHandle syscall from win32kfull.sys driver doesn't properly check if a process is a protected process on the mentioned Windows versions. This can be abused to get a process handle with PROCESS_QUERY_LIMITED_INFORMATION | PROCESS_VM_OPERATION | PROCESS_VM_READ | PROCESS_VM_WRITE | PROCESS_DUP_HANDLE to a protected process from an unprotected process.

The target protected process needs a window for this bypass to work. The PoC exploits WerFaultSecure.exe and achieves PP-WinTcb. For this bypass no admin privileges are required. It was fixed in Windows 11 24H2.

I saw this post from James Forshaw: https://infosec.exchange/@tiraniddo/115539156769921108
My first reaction was: Wait a seconds. I know this. I already found this in 2023 together with CVE-2023-41772, but couldn't find a protected process as a valid target. So thanks to James Forshaw for finding a good target (WerFaultSecure.exe). I told Microsoft about this, when I reported CVE-2023-41772. This might be the reason why this was fixed in Windows 11 24H2.

For Windows 10 1809 / Windows Server 2019 you can use the WerFaultSecure.exe and wer.dll binaries from Windows 10 21H2 / Windows Server 2022. Put both binaries in a folder and provide the path to WerFaultSecure.exe as first command line argument to PPLwindow.

![PPLwindow PPL Bypass](https://raw.githubusercontent.com/R41N3RZUF477/PPLwindow/main/pplwindow.png)

PPLwindow

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

PPLwindow

파일 탐색기

오늘의 추천 프로젝트

Was this content helpful?

Recent Feedback

Download README