wtfbbq

Is there anyway to hook external process?

1

inside ia32::cr3_t kernel_cr3 auto kprocess = reinterpret_cast(PsGetCurrentProcess()); I've found that if I KeStackAttachProcess to external process, therefore PsGetcurrentProcess returns external process In this way it can hook external process, but...

Nvm

Can I change RIP address by this?

2

I want to change RIP address using this debugger. However I can't see there are external method to do exception handler. Is it possible to do this?