Acasă Explorează Ajutor
Autentificare
zhensolid
/
OperatorsKit
1
0
Bifurcare 0
Fisiere Probleme 0 Trageți solicitările 0 Wiki
Arbore: 63c2e40ed0
Ramuri Etichete
OperatorsKit
/
KIT
/
FindHandle
unknown db89d9b285 first commit 2 ani în urmă
..
README.md db89d9b285 first commit 2 ani în urmă
beacon.h db89d9b285 first commit 2 ani în urmă
bofcompile.bat db89d9b285 first commit 2 ani în urmă
findhandle.c db89d9b285 first commit 2 ani în urmă
findhandle.cna db89d9b285 first commit 2 ani în urmă
findhandle.h db89d9b285 first commit 2 ani în urmă

README.md

FindHandle

Find process and thread handle types between processes.

Options

Search options: all: list all processes with handles to all other processes. h2p: list all processes that have a handle to a specific process. p2h: list handles from a specific process to all other processes.

Handle query options: proc: search for PROCESS type handles. thread: search for THREAD type handles.

Targeted search options: <pid>: for both the h2p and p2h search options, specify the PID of the process your interested in.

Usage

findhandle all <proc | thread> findhandle h2p <proc | thread> <pid> findhandle p2h <proc | thread> <pid>

Compile

  • 1. Make sure Visual Studio is installed and supports C/C++.
  • 2. Open the x64 Native Tools Command Prompt for VS <2019/2022> terminal.
  • 3. Run the bofcompile.bat script to compile the object file.
  • 4. In Cobalt strike, use the script manager to load the .cna script to import the tool.