Skip to content

Some bypass of Windows handle protection mechanisms... Tested on x64 XP, 7.

License

Notifications You must be signed in to change notification settings

Freedzone/batman

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

8 Commits
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

batman

Kernel module to bypass Windows handle protection mechanisms (obCallbacks). Tested on x64 XP, 7. "BATMAN HAS NO LIMITS."

How does it work?

This module accepts any handle instance from user space and changes its access mask inside kernel data structures to specified one. After that the calling program can do whatever it wants with target handle (process, file): write to it, read its memory, kill, delete etc. For communication protocol refer to IoCtl.h. CORE_STRUCTS.h contains undocumented kernel structures. Batman.c,h driver's source code.

About

Some bypass of Windows handle protection mechanisms... Tested on x64 XP, 7.

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published