https://github.com/lab52io/LeakedHandlesFinder

Leaked Windows processes handles identification tool
https://github.com/lab52io/LeakedHandlesFinder

Last synced: 4 months ago
JSON representation

Leaked Windows processes handles identification tool

• Host: GitHub
• URL: https://github.com/lab52io/LeakedHandlesFinder
• Owner: lab52io
• Created: 2022-02-24T08:45:31.000Z (over 3 years ago)
• Default Branch: master
• Last Pushed: 2022-03-14T10:06:02.000Z (over 3 years ago)
• Last Synced: 2024-08-05T17:27:09.538Z (about 1 year ago)
• Language: C++
• Size: 1.45 MB
• Stars: 268
• Watchers: 7
• Forks: 43
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - lab52io/LeakedHandlesFinder - Leaked Windows processes handles identification tool (C++)
• StarryDivineSky - lab52io/LeakedHandlesFinder

README

          
# LHF - Leaked Handles Finder

Leaked Windows processes handles identification tool. Useful for identify new LPE vulnerabilities during a pentest or simply as a new research process. 

Currently supports exploiting (autopwn) procesess leaked handles spawning a new arbitrary process (cmd.exe default).

![](Images/Help.png)

LHF identifies in realtime inherited handles and gives the researcher explotability tips

![](Images/OutputLog.png)

Presented at rootedcon 2022 https://www.rootedcon.com/ponentes-rooted2022/.

Presentation -> Presentation/Exploiting Leaked Handles for LPE.pdf