btbd/access

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1053 stars · 235 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Windows kernel driver plus DLL wrapper that lets a usermode process perform privileged operations on protected processes without creating a real handle, by wrapping syscalls to act with PROCESS_ALL_ACCESS privilege. It communicates with the kernel via a .data section modification and targets Windows 10 1803/1809/1903 on x64.

Use cases

• open a handle to a protected process without a real handle
• read and write memory of protected processes on Windows
• bypass process protection for debugging with tools like Cheat Engine
• hook syscalls to perform privileged operations from usermode
• interact with kernel from a DLL without handle creation

When to choose

• you need handleless privileged access to protected processes on Windows 10 1803-1903 x64
• you want a minimal syscall-based kernel communication example
• you are researching Windows kernel exploit techniques or anti-cheat internals

When to avoid

• you need support for modern Windows versions or ARM64
• you want a maintained, licensed, production-ready library
• you need a legitimate API for process access rather than a security research tool

Facets

library · maturity maintenance

security reverse-engineering sdk security reverse-engineering windows windows cpp c kernel-driver syscall-hooking handleless-access protected-process cheat-engine x64

Member repositories

For agents

markdown · JSON · MCP: product_card(name="btbd/access")