Is it possible to somehow read the memory of other processes without opening HANDLE in Windows? I guess that from Ring3 I can not do it, but how then? Write a driver? Please help.
1 answer
Is it possible to somehow read the memory of other processes without opening HANDLE in Windows?
No, no way. Neither in user protection ring nor in kernel mode.
A handle, also known as a descriptor, is a unique identifier that allows Windows to distinguish between different entities, even of the same type. Without it, you will not be able to tell the operating system what exactly this or that action needs to be done over.
This concerns not only processes, but in general all software entities.
ߊߚߤߘ ߊߚߤߘ
10.3k 6 gold signs 27 silver marks 58 bronze marks
|