You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Test Environment: Windows 10 Enterprise LTSC 2015,Windows 10 Enterprise LTSC 20121 and Windows Server 2019
detour Vertion : Latest
UAC: Enable
Logon : Administrators group user(Not RID 500 account)
Test : Using DetourCreateProcessWithDll() ,DetourCreateProcessWithDlls() or DetourCreateProcessWithDllEx() to create a console loader program to run notepad.exe and inject my test dll into notepad.exe.
Right click on cmd.exe and select 'Run As Administrator",Click "Yes" on consent windows.
Result(Success): loader's output suggests DetourCreateProcessWithDll success and test dll is loaded into notepad.exe(check by process hacker and tasklist)
Run task manager either by select 'Run As Administrator" or by right click on taskbar and run task manager)
Run cmd.exe under task manager by "Run New Task" and check "Create this task with administrative privileges"
Result(Failure): loader's output suggest DetourCreateProcessWithDll success but test dll won't load into notepad.exe(check by process hacker and tasklist)
3.Run task manager either by select 'Run As Administrator" or by right click on taskbar and run task manager)
Run cmd.exe under task manager And un-check "Create this task with administrative privileges"
Result(Success): loader's output suggest DetourCreateProcessWithDll success and test dll is loaded into notepad.exe(check by process hacker and tasklist)
I have no idea why Test 2 fails. cmd.exe privileges in Test 2 is idential as Test 1(compares with whoami.exe and process hacker),even Test 3 in non elevated privilege,it succeed
The text was updated successfully, but these errors were encountered:
Test Environment: Windows 10 Enterprise LTSC 2015,Windows 10 Enterprise LTSC 20121 and Windows Server 2019
detour Vertion : Latest
UAC: Enable
Logon : Administrators group user(Not RID 500 account)
Test : Using DetourCreateProcessWithDll() ,DetourCreateProcessWithDlls() or DetourCreateProcessWithDllEx() to create a console loader program to run notepad.exe and inject my test dll into notepad.exe.
Right click on cmd.exe and select 'Run As Administrator",Click "Yes" on consent windows.
Result(Success): loader's output suggests DetourCreateProcessWithDll success and test dll is loaded into notepad.exe(check by process hacker and tasklist)
Run task manager either by select 'Run As Administrator" or by right click on taskbar and run task manager)
Run cmd.exe under task manager by "Run New Task" and check "Create this task with administrative privileges"
Result(Failure): loader's output suggest DetourCreateProcessWithDll success but test dll won't load into notepad.exe(check by process hacker and tasklist)
3.Run task manager either by select 'Run As Administrator" or by right click on taskbar and run task manager)
Run cmd.exe under task manager And un-check "Create this task with administrative privileges"
Result(Success): loader's output suggest DetourCreateProcessWithDll success and test dll is loaded into notepad.exe(check by process hacker and tasklist)
I have no idea why Test 2 fails. cmd.exe privileges in Test 2 is idential as Test 1(compares with whoami.exe and process hacker),even Test 3 in non elevated privilege,it succeed
The text was updated successfully, but these errors were encountered: